General
-
Target
2024-02-24_b5e9dfd9e17f1f0c200d7f7ccc5767a9_cryptolocker
-
Size
39KB
-
Sample
240224-d7pb9agh9t
-
MD5
b5e9dfd9e17f1f0c200d7f7ccc5767a9
-
SHA1
aa646009c2d9371f91741f6b734e8b8ac74b1505
-
SHA256
02645962975f00ecac1c094773b9b8a970061e954d9e4e48b3a8eb08959356d6
-
SHA512
310fc8afdcf108e4e740f806ac34aa7738dc2a6ca164f194e65561c37e27ce08f138321e09679f548eac18b541c46b33ceb1a8d39473b90b44020cfa1b6b6e02
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dyzt:bIDOw9a0Dwo3P1ojvUSDq
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_b5e9dfd9e17f1f0c200d7f7ccc5767a9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_b5e9dfd9e17f1f0c200d7f7ccc5767a9_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_b5e9dfd9e17f1f0c200d7f7ccc5767a9_cryptolocker
-
Size
39KB
-
MD5
b5e9dfd9e17f1f0c200d7f7ccc5767a9
-
SHA1
aa646009c2d9371f91741f6b734e8b8ac74b1505
-
SHA256
02645962975f00ecac1c094773b9b8a970061e954d9e4e48b3a8eb08959356d6
-
SHA512
310fc8afdcf108e4e740f806ac34aa7738dc2a6ca164f194e65561c37e27ce08f138321e09679f548eac18b541c46b33ceb1a8d39473b90b44020cfa1b6b6e02
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dyzt:bIDOw9a0Dwo3P1ojvUSDq
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-