General
-
Target
2024-03-14_3f38e0917081e2dee8b2121556203b7d_cryptolocker
-
Size
43KB
-
Sample
240314-3hdxnaae41
-
MD5
3f38e0917081e2dee8b2121556203b7d
-
SHA1
520d3a55ddd45a7b7e32f266a8d7bc4d9783d8e9
-
SHA256
33366c3e7ad5b3c974c0b5a2c44f5c8e62ac6aaf1a4e90c5765df27bb78a5920
-
SHA512
123b0fc4fe59e0278496e6717a93acb63d3a28ac6202b21d203f2b969a0e00e72d5ee7cfdd4aa00fe27797b1401a71539bfaf5240e66f1e06b9742daa5a7bf9f
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPCh:btB9g/xtCSKfxLIc/y
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_3f38e0917081e2dee8b2121556203b7d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_3f38e0917081e2dee8b2121556203b7d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_3f38e0917081e2dee8b2121556203b7d_cryptolocker
-
Size
43KB
-
MD5
3f38e0917081e2dee8b2121556203b7d
-
SHA1
520d3a55ddd45a7b7e32f266a8d7bc4d9783d8e9
-
SHA256
33366c3e7ad5b3c974c0b5a2c44f5c8e62ac6aaf1a4e90c5765df27bb78a5920
-
SHA512
123b0fc4fe59e0278496e6717a93acb63d3a28ac6202b21d203f2b969a0e00e72d5ee7cfdd4aa00fe27797b1401a71539bfaf5240e66f1e06b9742daa5a7bf9f
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPCh:btB9g/xtCSKfxLIc/y
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-