General
-
Target
2024-03-06_1cc2ebafab506bac0426d9b9d93e1494_cryptolocker
-
Size
41KB
-
Sample
240306-ct4dkshg83
-
MD5
1cc2ebafab506bac0426d9b9d93e1494
-
SHA1
9d7fb01b1657faaa45f2d3532c70048781612a1f
-
SHA256
b6d4cf82034806b29865536b2ca876663f1cd886854f3995d0f0b4644d8d2404
-
SHA512
5b6ff39f1237cf01f245878b28665122b8824874185c0ae84b71c67adbc3bc60c3c7a6bcb928820c88bdfc61f4850c036d026412ae2e987f580c00b227e6c358
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKF:bIDOw9a0Dwo3P1ojvUSDhH
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_1cc2ebafab506bac0426d9b9d93e1494_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_1cc2ebafab506bac0426d9b9d93e1494_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_1cc2ebafab506bac0426d9b9d93e1494_cryptolocker
-
Size
41KB
-
MD5
1cc2ebafab506bac0426d9b9d93e1494
-
SHA1
9d7fb01b1657faaa45f2d3532c70048781612a1f
-
SHA256
b6d4cf82034806b29865536b2ca876663f1cd886854f3995d0f0b4644d8d2404
-
SHA512
5b6ff39f1237cf01f245878b28665122b8824874185c0ae84b71c67adbc3bc60c3c7a6bcb928820c88bdfc61f4850c036d026412ae2e987f580c00b227e6c358
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKF:bIDOw9a0Dwo3P1ojvUSDhH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-