General
-
Target
2024-02-24_1db5734ab6ed28ad1dae234a4ad67f14_cryptolocker
-
Size
35KB
-
Sample
240224-e3vtxaaa4v
-
MD5
1db5734ab6ed28ad1dae234a4ad67f14
-
SHA1
0107e31ee00e9f14ee7192661278a2da74baa684
-
SHA256
dc41d72add5996bf0d8607bfeecc6abaa2cf090269635d91fca05ddb7bb4319c
-
SHA512
063567b696bf217fcb1675612ac9057589588155f8df4c73142d00ef746aa798f9b219c9770d3c0841d2231252b8b8711b936ffc77741d31c75974ecd86fe08f
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7c8:bxNrC7kYo1Fxf3s0c8
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_1db5734ab6ed28ad1dae234a4ad67f14_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_1db5734ab6ed28ad1dae234a4ad67f14_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_1db5734ab6ed28ad1dae234a4ad67f14_cryptolocker
-
Size
35KB
-
MD5
1db5734ab6ed28ad1dae234a4ad67f14
-
SHA1
0107e31ee00e9f14ee7192661278a2da74baa684
-
SHA256
dc41d72add5996bf0d8607bfeecc6abaa2cf090269635d91fca05ddb7bb4319c
-
SHA512
063567b696bf217fcb1675612ac9057589588155f8df4c73142d00ef746aa798f9b219c9770d3c0841d2231252b8b8711b936ffc77741d31c75974ecd86fe08f
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7c8:bxNrC7kYo1Fxf3s0c8
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-