General
-
Target
2024-03-06_21780e2695156ca66080ca27eb536425_cryptolocker
-
Size
61KB
-
Sample
240306-r2egrabg6s
-
MD5
21780e2695156ca66080ca27eb536425
-
SHA1
221ab5452eea662f83ecf4c80aead45543962184
-
SHA256
e21ce302567112c82b10611ba1da3366ace1f23581a501584af9da0f2f4fa0c6
-
SHA512
592c60b90f63a6c2483ecd130e57b2f97d6d0813f0305460570a0cc51b1bc3b531773eb289af18c8e7b32d4d9bb9137e06a96fbb5c084270da0e1961f8df4446
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNO:btng54SMLr+/AO/kIhfoKMHdJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_21780e2695156ca66080ca27eb536425_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_21780e2695156ca66080ca27eb536425_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_21780e2695156ca66080ca27eb536425_cryptolocker
-
Size
61KB
-
MD5
21780e2695156ca66080ca27eb536425
-
SHA1
221ab5452eea662f83ecf4c80aead45543962184
-
SHA256
e21ce302567112c82b10611ba1da3366ace1f23581a501584af9da0f2f4fa0c6
-
SHA512
592c60b90f63a6c2483ecd130e57b2f97d6d0813f0305460570a0cc51b1bc3b531773eb289af18c8e7b32d4d9bb9137e06a96fbb5c084270da0e1961f8df4446
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHNO:btng54SMLr+/AO/kIhfoKMHdJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-