General
-
Target
2024-03-10_b0d3184222e7f5df7a1940fc4d70863e_cryptolocker
-
Size
47KB
-
Sample
240310-mq6dwaba4x
-
MD5
b0d3184222e7f5df7a1940fc4d70863e
-
SHA1
802f572b132494daba83722a6673e84b5e449501
-
SHA256
fe5d1f01bec31197e6d607515397461dc33ca5f9aafad70729e4ce8c081611c4
-
SHA512
fb971e593502fce1b7e84b96179f7412a3dbd1f7afd1ddd88e02b3eeb209cc94b4baf773a4d9bd179fc293a17e416e548fcde76a7999d9808b4162a798f7407e
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsc:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1e
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_b0d3184222e7f5df7a1940fc4d70863e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_b0d3184222e7f5df7a1940fc4d70863e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_b0d3184222e7f5df7a1940fc4d70863e_cryptolocker
-
Size
47KB
-
MD5
b0d3184222e7f5df7a1940fc4d70863e
-
SHA1
802f572b132494daba83722a6673e84b5e449501
-
SHA256
fe5d1f01bec31197e6d607515397461dc33ca5f9aafad70729e4ce8c081611c4
-
SHA512
fb971e593502fce1b7e84b96179f7412a3dbd1f7afd1ddd88e02b3eeb209cc94b4baf773a4d9bd179fc293a17e416e548fcde76a7999d9808b4162a798f7407e
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1wsc:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ1e
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-