General
-
Target
2024-03-08_4bd9be1d5f9dadfe7e8de144c40a60ec_cryptolocker
-
Size
61KB
-
Sample
240308-gfmwwsge28
-
MD5
4bd9be1d5f9dadfe7e8de144c40a60ec
-
SHA1
3c5b60a612fdd9778c0b438041c807ca4399a712
-
SHA256
b7c6b1ed919b61fa365f29a88b6607e3411252b9a3c979b6749a7144bf2b466d
-
SHA512
a64fce085762eb3bc2dd368fc52ed63c618311299ad460050678b17f8fbfb8718e900ad971d13f216a2a65ce2f2bfe7a99f9dbb159740048684c68c6ac83976a
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHz1:btng54SMLr+/AO/kIhfoKMHdA
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_4bd9be1d5f9dadfe7e8de144c40a60ec_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_4bd9be1d5f9dadfe7e8de144c40a60ec_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_4bd9be1d5f9dadfe7e8de144c40a60ec_cryptolocker
-
Size
61KB
-
MD5
4bd9be1d5f9dadfe7e8de144c40a60ec
-
SHA1
3c5b60a612fdd9778c0b438041c807ca4399a712
-
SHA256
b7c6b1ed919b61fa365f29a88b6607e3411252b9a3c979b6749a7144bf2b466d
-
SHA512
a64fce085762eb3bc2dd368fc52ed63c618311299ad460050678b17f8fbfb8718e900ad971d13f216a2a65ce2f2bfe7a99f9dbb159740048684c68c6ac83976a
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHz1:btng54SMLr+/AO/kIhfoKMHdA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-