General
-
Target
2024-03-10_6a961bdf38b654d2c8360c62e2034e77_cryptolocker
-
Size
30KB
-
Sample
240310-mmz3paaf43
-
MD5
6a961bdf38b654d2c8360c62e2034e77
-
SHA1
9d91543fdb1f76e2a3000b6e376a8b5fbad6d339
-
SHA256
d9acba65f3b09066564b794a45946eda441f24971f4245e599069a2c18b44d63
-
SHA512
d477c7cdbdc5f0425e0cda12fe807e4fc0ccf7a089485db0b14a4b82090b9ff77cd25bf6a8e2c9eb3841aedfb33af86fba367d913a9f41b330ee9d886d756856
-
SSDEEP
384:buWbtjL8L1iE0eBhkzPbKAaomTqC9Mwf4fjDCgpmaPc4mb8Ybi:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbi
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_6a961bdf38b654d2c8360c62e2034e77_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_6a961bdf38b654d2c8360c62e2034e77_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-10_6a961bdf38b654d2c8360c62e2034e77_cryptolocker
-
Size
30KB
-
MD5
6a961bdf38b654d2c8360c62e2034e77
-
SHA1
9d91543fdb1f76e2a3000b6e376a8b5fbad6d339
-
SHA256
d9acba65f3b09066564b794a45946eda441f24971f4245e599069a2c18b44d63
-
SHA512
d477c7cdbdc5f0425e0cda12fe807e4fc0ccf7a089485db0b14a4b82090b9ff77cd25bf6a8e2c9eb3841aedfb33af86fba367d913a9f41b330ee9d886d756856
-
SSDEEP
384:buWbtjL8L1iE0eBhkzPbKAaomTqC9Mwf4fjDCgpmaPc4mb8Ybi:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-