General
-
Target
2024-03-13_c7314b9f4018d287680a1af8eafa4034_cryptolocker
-
Size
50KB
-
Sample
240313-2qj8zabd3s
-
MD5
c7314b9f4018d287680a1af8eafa4034
-
SHA1
d49272c8b8ed0432b9d4f5a3333c0ec42eb2ec96
-
SHA256
ace354d8ea091bd87182c4f841937f553e1a8fe353176512ea13ef013f5332e8
-
SHA512
aba1df856b886982a9c458f959b13f677cd375e834b987656e2444d94f76ce2bfd0c791c4cf21846fded610dcba427c4e3ffaa4c02f024521964839dfb14fd55
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSi9:bgGYcA/53GAA6y37Q6dI+d50
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_c7314b9f4018d287680a1af8eafa4034_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_c7314b9f4018d287680a1af8eafa4034_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-13_c7314b9f4018d287680a1af8eafa4034_cryptolocker
-
Size
50KB
-
MD5
c7314b9f4018d287680a1af8eafa4034
-
SHA1
d49272c8b8ed0432b9d4f5a3333c0ec42eb2ec96
-
SHA256
ace354d8ea091bd87182c4f841937f553e1a8fe353176512ea13ef013f5332e8
-
SHA512
aba1df856b886982a9c458f959b13f677cd375e834b987656e2444d94f76ce2bfd0c791c4cf21846fded610dcba427c4e3ffaa4c02f024521964839dfb14fd55
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSi9:bgGYcA/53GAA6y37Q6dI+d50
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-