General
-
Target
2024-03-12_fdefccb3106a4095e2d80f684b25b2e4_cryptolocker
-
Size
39KB
-
Sample
240312-fn96qaba75
-
MD5
fdefccb3106a4095e2d80f684b25b2e4
-
SHA1
29d6dec5f512f992d1e8eaa3c1aba0c51ed476e8
-
SHA256
790d0f4cb25a686c8675f52f034b43bdd11b9f2b8a1b3dbeb74f8e821abd82cc
-
SHA512
b417ab2290b6dd59dfc3e7a0168965575d8a6009c138dd3278f01872841b8af696a795a536e963e09aec99e7f8d7fe1479c337902496f80c7603156a6badd924
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFpv:bxNrC7kYo1Fxf3s05rwxbFB
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_fdefccb3106a4095e2d80f684b25b2e4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_fdefccb3106a4095e2d80f684b25b2e4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_fdefccb3106a4095e2d80f684b25b2e4_cryptolocker
-
Size
39KB
-
MD5
fdefccb3106a4095e2d80f684b25b2e4
-
SHA1
29d6dec5f512f992d1e8eaa3c1aba0c51ed476e8
-
SHA256
790d0f4cb25a686c8675f52f034b43bdd11b9f2b8a1b3dbeb74f8e821abd82cc
-
SHA512
b417ab2290b6dd59dfc3e7a0168965575d8a6009c138dd3278f01872841b8af696a795a536e963e09aec99e7f8d7fe1479c337902496f80c7603156a6badd924
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFpv:bxNrC7kYo1Fxf3s05rwxbFB
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-