General
-
Target
2024-03-12_f7d9db4a1015990abbe29bddd9897cfd_cryptolocker
-
Size
48KB
-
Sample
240312-chqy4sda31
-
MD5
f7d9db4a1015990abbe29bddd9897cfd
-
SHA1
a054a2917f9484e798369472b0d2d4313a4e2a06
-
SHA256
d2e711c328db3a984a9ec7ee481baef283229a2af5e7af917410d4173408e10b
-
SHA512
4a52c12f3a8865a3387a243d370416cf401947c00da41f06bbbc6adb0f6d214781116ba979c443d3742f41964103248e03b8b0837175118ff70d9ff01584ee22
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddgI:bgGYcA/53GAA6y37Q6ddgI
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_f7d9db4a1015990abbe29bddd9897cfd_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_f7d9db4a1015990abbe29bddd9897cfd_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_f7d9db4a1015990abbe29bddd9897cfd_cryptolocker
-
Size
48KB
-
MD5
f7d9db4a1015990abbe29bddd9897cfd
-
SHA1
a054a2917f9484e798369472b0d2d4313a4e2a06
-
SHA256
d2e711c328db3a984a9ec7ee481baef283229a2af5e7af917410d4173408e10b
-
SHA512
4a52c12f3a8865a3387a243d370416cf401947c00da41f06bbbc6adb0f6d214781116ba979c443d3742f41964103248e03b8b0837175118ff70d9ff01584ee22
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddgI:bgGYcA/53GAA6y37Q6ddgI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-