General
-
Target
2024-03-07_f0357d7269c732900affd6e4ba84d9f1_cryptolocker
-
Size
36KB
-
Sample
240307-3rdcgshe49
-
MD5
f0357d7269c732900affd6e4ba84d9f1
-
SHA1
8ae53824f9d92d0b69f5b19f8ca9fbbf7bce91dc
-
SHA256
955effe1cad7e8072ec09efb81d0073a92e8f800bb9e0a751116a9eedb0689a9
-
SHA512
1409228b6e7ef34b4545506b3d8c0aea505639870d6f8ba2ffdb3678340d95fe094324b1871a5edf3ea84fb427c3ff044f56b0cf6137749f359d8529d0d16747
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH1I:btB9g/WItCSsAGjX7e9N0hunKLO
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_f0357d7269c732900affd6e4ba84d9f1_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_f0357d7269c732900affd6e4ba84d9f1_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_f0357d7269c732900affd6e4ba84d9f1_cryptolocker
-
Size
36KB
-
MD5
f0357d7269c732900affd6e4ba84d9f1
-
SHA1
8ae53824f9d92d0b69f5b19f8ca9fbbf7bce91dc
-
SHA256
955effe1cad7e8072ec09efb81d0073a92e8f800bb9e0a751116a9eedb0689a9
-
SHA512
1409228b6e7ef34b4545506b3d8c0aea505639870d6f8ba2ffdb3678340d95fe094324b1871a5edf3ea84fb427c3ff044f56b0cf6137749f359d8529d0d16747
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH1I:btB9g/WItCSsAGjX7e9N0hunKLO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-