General
-
Target
2024-03-09_66d10e4dabd4a12e15126ae186e6d5e6_cryptolocker
-
Size
61KB
-
Sample
240309-e8nb1sdf4w
-
MD5
66d10e4dabd4a12e15126ae186e6d5e6
-
SHA1
ef39674eb6df7f4926b4991df46eab31f4bc06ac
-
SHA256
61357bcd2723d58b7eae036c2ef82d46d0b00d5380f159cfe95abf70a6d81a5d
-
SHA512
62f8f84ddf5e3f121874f49286b1f3506bdb020c91e175301e3328bad9c4b101287fb75f5d309d4ceb996fd2a8600b7d97b4fc655e4d911e00f97ed03c6534da
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH4:btng54SMLr+/AO/kIhfoKMHdh
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_66d10e4dabd4a12e15126ae186e6d5e6_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-09_66d10e4dabd4a12e15126ae186e6d5e6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_66d10e4dabd4a12e15126ae186e6d5e6_cryptolocker
-
Size
61KB
-
MD5
66d10e4dabd4a12e15126ae186e6d5e6
-
SHA1
ef39674eb6df7f4926b4991df46eab31f4bc06ac
-
SHA256
61357bcd2723d58b7eae036c2ef82d46d0b00d5380f159cfe95abf70a6d81a5d
-
SHA512
62f8f84ddf5e3f121874f49286b1f3506bdb020c91e175301e3328bad9c4b101287fb75f5d309d4ceb996fd2a8600b7d97b4fc655e4d911e00f97ed03c6534da
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH4:btng54SMLr+/AO/kIhfoKMHdh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-