General
-
Target
2024-03-14_b99122b947cba750f7628c37ee74a9da_cryptolocker
-
Size
38KB
-
Sample
240314-q7nryafh39
-
MD5
b99122b947cba750f7628c37ee74a9da
-
SHA1
c514681a9c9cda3070d6b0abfb256fd74d57ba86
-
SHA256
e37ca93f24d36891aee72fb8a4306af93a3736ef940aad88314945cffed9be57
-
SHA512
afe8c214553e94002f213a3aef96ae4c9dea08dbbde0fc560b91482de228d656626d6dc38ae30f465f6a5546fea8f6e3fb4da8b716aee1b21e787ec8ee0d97e9
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3Z0:bxNrC7kYo1Fxf3s06gf0
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_b99122b947cba750f7628c37ee74a9da_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_b99122b947cba750f7628c37ee74a9da_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_b99122b947cba750f7628c37ee74a9da_cryptolocker
-
Size
38KB
-
MD5
b99122b947cba750f7628c37ee74a9da
-
SHA1
c514681a9c9cda3070d6b0abfb256fd74d57ba86
-
SHA256
e37ca93f24d36891aee72fb8a4306af93a3736ef940aad88314945cffed9be57
-
SHA512
afe8c214553e94002f213a3aef96ae4c9dea08dbbde0fc560b91482de228d656626d6dc38ae30f465f6a5546fea8f6e3fb4da8b716aee1b21e787ec8ee0d97e9
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3Z0:bxNrC7kYo1Fxf3s06gf0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-