General
-
Target
2024-02-24_0f666a3685537396cdedb73f375f8b0a_cryptolocker
-
Size
386KB
-
Sample
240224-z9c8naff2v
-
MD5
0f666a3685537396cdedb73f375f8b0a
-
SHA1
7c753fe79755a2e45145028b872cad6cb6f86c85
-
SHA256
429bcb60c5fd543540e2c89a04c878f78f39c886bf856de05bcb571aecce8c47
-
SHA512
fec5b0ec02c51a7ae5c96b6f21f8349446d80ed2af853d4bc1456e5dcb50a31f1e26727464c0bc099fbd793d8201d1cab9f915eeafb19a277ea3c94affb93bc0
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXI:nnOflT/ZFIjBz3xjTxynGUOUhXI
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_0f666a3685537396cdedb73f375f8b0a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_0f666a3685537396cdedb73f375f8b0a_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_0f666a3685537396cdedb73f375f8b0a_cryptolocker
-
Size
386KB
-
MD5
0f666a3685537396cdedb73f375f8b0a
-
SHA1
7c753fe79755a2e45145028b872cad6cb6f86c85
-
SHA256
429bcb60c5fd543540e2c89a04c878f78f39c886bf856de05bcb571aecce8c47
-
SHA512
fec5b0ec02c51a7ae5c96b6f21f8349446d80ed2af853d4bc1456e5dcb50a31f1e26727464c0bc099fbd793d8201d1cab9f915eeafb19a277ea3c94affb93bc0
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXI:nnOflT/ZFIjBz3xjTxynGUOUhXI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-