General
- Target 2024-03-12_40bbd6e7653f0baaeff3dcd78aa1d0f3_cryptolocker
- Size 55KB
- Sample240312-bx6sfaeb63
- SHA256 dec4157e1d59642cadcd26c326b28e79c6ccd3d20108d4830eca9f94eb9ae890
- MD5 40bbd6e7653f0baaeff3dcd78aa1d0f3
- SHA1 e05ad365b9cbfc98075513caebfa11013d8282e0
- SHA512 a26544b7ce3d0225c22ceb807cfc64d67842e22863893b95b445abf1fd7937c05f49b6ae83895db9ada3907168cbf70cf8d8de4ad49e75b9fe83e26622c343b2
- SSDEEP 768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcm+X:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-03-12_40bbd6e7653f0baaeff3dcd78aa1d0f3_cryptolocker.exe
Resource
win7-20231129-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-12_40bbd6e7653f0baaeff3dcd78aa1d0f3_cryptolocker.exe
Resource
win10v2004-20240226-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-03-12_40bbd6e7653f0baaeff3dcd78aa1d0f3_cryptolocker
- Size 55KB
- SHA256 dec4157e1d59642cadcd26c326b28e79c6ccd3d20108d4830eca9f94eb9ae890
- MD5 40bbd6e7653f0baaeff3dcd78aa1d0f3
- SHA1 e05ad365b9cbfc98075513caebfa11013d8282e0
- SHA512 a26544b7ce3d0225c22ceb807cfc64d67842e22863893b95b445abf1fd7937c05f49b6ae83895db9ada3907168cbf70cf8d8de4ad49e75b9fe83e26622c343b2
- SSDEEP 768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2L0zN/Pcm+X:X6QFElP6n+gJBMOtEvwDpjBtE1yILOkp
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL