General
-
Target
2024-03-13_6c31182cc86172ab8a02b1244c02dff2_cryptolocker
-
Size
47KB
-
Sample
240313-2ejhasah81
-
MD5
6c31182cc86172ab8a02b1244c02dff2
-
SHA1
40924a93cde4e0988f8484868943df97304559f3
-
SHA256
866348d4ca33e7c636650a3feaa5e5daae7ffdd311e4ef7be585098c98369bd7
-
SHA512
658a7f1735b771f8267aeaff21b0123b792ad5f16e2dfa7b2c4c70e7b3f4d43fe74bb96e3c319aac241187d1d17e5846f24b079366a50ecf6045f10b2f2c197e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhnj:bgGYcA/53GAA6y37nbBnj
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_6c31182cc86172ab8a02b1244c02dff2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_6c31182cc86172ab8a02b1244c02dff2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_6c31182cc86172ab8a02b1244c02dff2_cryptolocker
-
Size
47KB
-
MD5
6c31182cc86172ab8a02b1244c02dff2
-
SHA1
40924a93cde4e0988f8484868943df97304559f3
-
SHA256
866348d4ca33e7c636650a3feaa5e5daae7ffdd311e4ef7be585098c98369bd7
-
SHA512
658a7f1735b771f8267aeaff21b0123b792ad5f16e2dfa7b2c4c70e7b3f4d43fe74bb96e3c319aac241187d1d17e5846f24b079366a50ecf6045f10b2f2c197e
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvhnj:bgGYcA/53GAA6y37nbBnj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-