General
-
Target
2024-03-06_09b89c38851dfc26b131f5685a6dad78_cryptolocker
-
Size
38KB
-
Sample
240306-bt3avagc64
-
MD5
09b89c38851dfc26b131f5685a6dad78
-
SHA1
8dcac2ddf822a1b9d4c3b05743dcf09b1eaacc3c
-
SHA256
7856b48774e76b50e2cff656bacbb4981cafdfe7827b40aa30d1bf8ca50bc2c7
-
SHA512
1ff336e3263c1231ebcdcba74e9131497f2568cd62bb1b0fd7889cd5ea3891eaf4f35861647aa0c2ad93ad1222bcecedea8f9c837287d64101b17b57e6569fb8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/oBr:bgGYcA/53GADw8CrSr
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_09b89c38851dfc26b131f5685a6dad78_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_09b89c38851dfc26b131f5685a6dad78_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_09b89c38851dfc26b131f5685a6dad78_cryptolocker
-
Size
38KB
-
MD5
09b89c38851dfc26b131f5685a6dad78
-
SHA1
8dcac2ddf822a1b9d4c3b05743dcf09b1eaacc3c
-
SHA256
7856b48774e76b50e2cff656bacbb4981cafdfe7827b40aa30d1bf8ca50bc2c7
-
SHA512
1ff336e3263c1231ebcdcba74e9131497f2568cd62bb1b0fd7889cd5ea3891eaf4f35861647aa0c2ad93ad1222bcecedea8f9c837287d64101b17b57e6569fb8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/oBr:bgGYcA/53GADw8CrSr
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-