General
-
Target
2024-02-25_c5d06455cc1b129d310cf05246f6d6d5_cryptolocker
-
Size
41KB
-
Sample
240225-q1382sch79
-
MD5
c5d06455cc1b129d310cf05246f6d6d5
-
SHA1
56d72f6c67f842cc01f68385678b755d1411e4d4
-
SHA256
6aa33d47b1f86f4c4f54e4ce219a368f57d4356e4417bdd90734ab8bdf2ed437
-
SHA512
cfa64c11c405d6ea0d05853d343b72351b7a577b8e90ceadc546df111ed792bb61e6d54ddd32b386085bb13e4a8f83353b760ecc31b261a73dd2a05e6e900a42
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKXuy:bIDOw9a0Dwo3P1ojvUSDh1L
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-25_c5d06455cc1b129d310cf05246f6d6d5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-25_c5d06455cc1b129d310cf05246f6d6d5_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-25_c5d06455cc1b129d310cf05246f6d6d5_cryptolocker
-
Size
41KB
-
MD5
c5d06455cc1b129d310cf05246f6d6d5
-
SHA1
56d72f6c67f842cc01f68385678b755d1411e4d4
-
SHA256
6aa33d47b1f86f4c4f54e4ce219a368f57d4356e4417bdd90734ab8bdf2ed437
-
SHA512
cfa64c11c405d6ea0d05853d343b72351b7a577b8e90ceadc546df111ed792bb61e6d54ddd32b386085bb13e4a8f83353b760ecc31b261a73dd2a05e6e900a42
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKXuy:bIDOw9a0Dwo3P1ojvUSDh1L
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-