General
-
Target
2024-02-28_6aa312133a7e7adce872239accff8af5_cryptolocker
-
Size
60KB
-
Sample
240228-t8rf1agf9t
-
MD5
6aa312133a7e7adce872239accff8af5
-
SHA1
3df7665f58030166f6883ceea0b511162741c25d
-
SHA256
2b55e50cc41725142b76cfdc6b671d6987d09d1100449662cbb046cdad421746
-
SHA512
efb873c227fd53ede98c26e51c82be32865b247df9a07cf6cee28c8507758848b88e9cdc9b043bc98a4638a1fe4c73f6f6a48006e1b57c8226f677be8c7776a6
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHae:btng54SMLr+/AO/kIhfoKMHd8
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_6aa312133a7e7adce872239accff8af5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_6aa312133a7e7adce872239accff8af5_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_6aa312133a7e7adce872239accff8af5_cryptolocker
-
Size
60KB
-
MD5
6aa312133a7e7adce872239accff8af5
-
SHA1
3df7665f58030166f6883ceea0b511162741c25d
-
SHA256
2b55e50cc41725142b76cfdc6b671d6987d09d1100449662cbb046cdad421746
-
SHA512
efb873c227fd53ede98c26e51c82be32865b247df9a07cf6cee28c8507758848b88e9cdc9b043bc98a4638a1fe4c73f6f6a48006e1b57c8226f677be8c7776a6
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHae:btng54SMLr+/AO/kIhfoKMHd8
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-