General
-
Target
2024-03-09_4df2860c0e53e5ea3b38222e76f288e2_cryptolocker
-
Size
34KB
-
Sample
240309-d4l3qacc65
-
MD5
4df2860c0e53e5ea3b38222e76f288e2
-
SHA1
373e43b80ad17392a74ed7d0321f132a16fe14ed
-
SHA256
093a3d033d2d6a8604dc40cddbb02089a20453b81b2b6bde0f35264e9a86ad68
-
SHA512
9fbf0393e74533582c1c1ebe428fe179f9a280073a38fbf381c5df657c19dc24d11e2316cd083f30888c6e8eb62b078d6e13d00f24e4f0b698a81002b3357994
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVfdsHY6:bA74zYcgT/Ekd0ryfjPIunYw16D
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_4df2860c0e53e5ea3b38222e76f288e2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_4df2860c0e53e5ea3b38222e76f288e2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_4df2860c0e53e5ea3b38222e76f288e2_cryptolocker
-
Size
34KB
-
MD5
4df2860c0e53e5ea3b38222e76f288e2
-
SHA1
373e43b80ad17392a74ed7d0321f132a16fe14ed
-
SHA256
093a3d033d2d6a8604dc40cddbb02089a20453b81b2b6bde0f35264e9a86ad68
-
SHA512
9fbf0393e74533582c1c1ebe428fe179f9a280073a38fbf381c5df657c19dc24d11e2316cd083f30888c6e8eb62b078d6e13d00f24e4f0b698a81002b3357994
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVfdsHY6:bA74zYcgT/Ekd0ryfjPIunYw16D
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-