General
-
Target
2024-02-29_90e2cd4903af6ebf795dc7fefd54290f_cryptolocker
-
Size
37KB
-
Sample
240229-eacsmace6y
-
MD5
90e2cd4903af6ebf795dc7fefd54290f
-
SHA1
fb7678d5578aac42f04dbd0eec4a837d06c54c55
-
SHA256
c8609e83bf43c5937cb91a004b939a01a298ef85ecbc549cbd9d72d8363d8c8a
-
SHA512
8260ed27ee6d7c105bf7e5140e4d5405420f75ecad371759796363f3a96ef6df54ae5330cfa0a699c0c9d95b2b39ca83c7e7fd93b60998460484d7376fdb2f0a
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6Ur:bAvJCYOOvbRPDEgXrNekd7l94i3py/r
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_90e2cd4903af6ebf795dc7fefd54290f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_90e2cd4903af6ebf795dc7fefd54290f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-29_90e2cd4903af6ebf795dc7fefd54290f_cryptolocker
-
Size
37KB
-
MD5
90e2cd4903af6ebf795dc7fefd54290f
-
SHA1
fb7678d5578aac42f04dbd0eec4a837d06c54c55
-
SHA256
c8609e83bf43c5937cb91a004b939a01a298ef85ecbc549cbd9d72d8363d8c8a
-
SHA512
8260ed27ee6d7c105bf7e5140e4d5405420f75ecad371759796363f3a96ef6df54ae5330cfa0a699c0c9d95b2b39ca83c7e7fd93b60998460484d7376fdb2f0a
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6Ur:bAvJCYOOvbRPDEgXrNekd7l94i3py/r
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-