General
-
Target
2024-03-08_30f9cbc058de7ad3f865288defa64516_cryptolocker
-
Size
61KB
-
Sample
240308-x67a8afb9v
-
MD5
30f9cbc058de7ad3f865288defa64516
-
SHA1
985e8679dd260aa41c38aa1a3f2764de2732a07e
-
SHA256
cad3ea80603007e22a54933a5b52827b33758cd36e8ecc9689f51f3af227b772
-
SHA512
19c444d5512558c972e25a925b76abda6a76b55883f7035208c544089760a576c420429cf32600812646c78b2c5a6519820b4736848971fe8bb2d5f3d6459776
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaa:btng54SMLr+/AO/kIhfoKMHdw
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_30f9cbc058de7ad3f865288defa64516_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_30f9cbc058de7ad3f865288defa64516_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_30f9cbc058de7ad3f865288defa64516_cryptolocker
-
Size
61KB
-
MD5
30f9cbc058de7ad3f865288defa64516
-
SHA1
985e8679dd260aa41c38aa1a3f2764de2732a07e
-
SHA256
cad3ea80603007e22a54933a5b52827b33758cd36e8ecc9689f51f3af227b772
-
SHA512
19c444d5512558c972e25a925b76abda6a76b55883f7035208c544089760a576c420429cf32600812646c78b2c5a6519820b4736848971fe8bb2d5f3d6459776
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHaa:btng54SMLr+/AO/kIhfoKMHdw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-