General
-
Target
2024-03-10_b37ca98196b3bdc60f9f78fdd24dc152_cryptolocker
-
Size
32KB
-
Sample
240310-c888daad59
-
MD5
b37ca98196b3bdc60f9f78fdd24dc152
-
SHA1
da100e8cd93a58a106fd946371e803350cd2197a
-
SHA256
48e695e1b5a97d04ebbef9b141addc66eee1ce5142a2513c52db410144ab897a
-
SHA512
4f6608ad80d61b64d59ac32584d778b2ab3989d66cdf4f49d5e24d20758b95184cc5ac24893d86ad1233dfbfa418755bc315049ef6b99382fab932402281909c
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/Tl+6lt6Gqy4:bA74zYcgT/Ekd0ryfjQRSlpltF4
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_b37ca98196b3bdc60f9f78fdd24dc152_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_b37ca98196b3bdc60f9f78fdd24dc152_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_b37ca98196b3bdc60f9f78fdd24dc152_cryptolocker
-
Size
32KB
-
MD5
b37ca98196b3bdc60f9f78fdd24dc152
-
SHA1
da100e8cd93a58a106fd946371e803350cd2197a
-
SHA256
48e695e1b5a97d04ebbef9b141addc66eee1ce5142a2513c52db410144ab897a
-
SHA512
4f6608ad80d61b64d59ac32584d778b2ab3989d66cdf4f49d5e24d20758b95184cc5ac24893d86ad1233dfbfa418755bc315049ef6b99382fab932402281909c
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/Tl+6lt6Gqy4:bA74zYcgT/Ekd0ryfjQRSlpltF4
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-