General
-
Target
2024-03-12_1b728f79bf1b24eb192aa12e49624fe7_cryptolocker
-
Size
31KB
-
Sample
240312-d1bsksha76
-
MD5
1b728f79bf1b24eb192aa12e49624fe7
-
SHA1
d8ff7c2ecfb2debfad155f257fb1d756e6b98d9b
-
SHA256
bd063f0425ec5baf89a90a46a6d1fcd669a7a1311cfdaaa1d178b22fbea4e3ae
-
SHA512
fac9e2dde44612b14fa904223d2200c205e89c447555787287f66923ef24e9a8841ed6c7e5e98a84daae182d31558bd75ae9cb3b5262977fae92d96acba772f0
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/Tl+6lt6GqCn:bA74zYcgT/Ekd0ryfjQRSlplt9n
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_1b728f79bf1b24eb192aa12e49624fe7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_1b728f79bf1b24eb192aa12e49624fe7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_1b728f79bf1b24eb192aa12e49624fe7_cryptolocker
-
Size
31KB
-
MD5
1b728f79bf1b24eb192aa12e49624fe7
-
SHA1
d8ff7c2ecfb2debfad155f257fb1d756e6b98d9b
-
SHA256
bd063f0425ec5baf89a90a46a6d1fcd669a7a1311cfdaaa1d178b22fbea4e3ae
-
SHA512
fac9e2dde44612b14fa904223d2200c205e89c447555787287f66923ef24e9a8841ed6c7e5e98a84daae182d31558bd75ae9cb3b5262977fae92d96acba772f0
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ/Tl+6lt6GqCn:bA74zYcgT/Ekd0ryfjQRSlplt9n
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-