General
-
Target
2024-03-13_bc1558e1ebea279a338b1e796e7dd28d_cryptolocker
-
Size
34KB
-
Sample
240313-kl179aah28
-
MD5
bc1558e1ebea279a338b1e796e7dd28d
-
SHA1
e78359bc0ccaa7025eb3274fcd244e1f04fb3294
-
SHA256
573ec1ae54e781ca235c718998165d4068bd0202e3bcdc356990d0b04a92d46c
-
SHA512
545ccb5b7fe1f84fb0640d70d9d41f03a3aa8dad134ce7fa9f7c500fba9297d53a3027b813c5e10d9fd602567de03884b4faec96b153915060e20f4ef404e250
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4aKY:b7o/2n1TCraU6GD1a4Xt9bRU64hY
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_bc1558e1ebea279a338b1e796e7dd28d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_bc1558e1ebea279a338b1e796e7dd28d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_bc1558e1ebea279a338b1e796e7dd28d_cryptolocker
-
Size
34KB
-
MD5
bc1558e1ebea279a338b1e796e7dd28d
-
SHA1
e78359bc0ccaa7025eb3274fcd244e1f04fb3294
-
SHA256
573ec1ae54e781ca235c718998165d4068bd0202e3bcdc356990d0b04a92d46c
-
SHA512
545ccb5b7fe1f84fb0640d70d9d41f03a3aa8dad134ce7fa9f7c500fba9297d53a3027b813c5e10d9fd602567de03884b4faec96b153915060e20f4ef404e250
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4aKY:b7o/2n1TCraU6GD1a4Xt9bRU64hY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-