General
-
Target
2024-03-15_eaf9237aee405d9dfadf4e0154aa8767_cryptolocker
-
Size
77KB
-
Sample
240315-1ldd7adf75
-
MD5
eaf9237aee405d9dfadf4e0154aa8767
-
SHA1
2591902ab8d50fda09a7e3a903af1a7e7b0e5533
-
SHA256
14e2f7714ec1391b0f947f5bd8668f4fd4a29e1995cf7bb2697263b5f0be82dd
-
SHA512
1b28c05f3e55e227077b3b530bbbe18bfd341f8c05d0b5a8d1e8c669260aa1e4deafe1bedce8183d10825dfe35b4b3d273cc9b152805c48eba82c846b9a6a40b
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTC:ZVxkGOtEvwDpjcax/
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_eaf9237aee405d9dfadf4e0154aa8767_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_eaf9237aee405d9dfadf4e0154aa8767_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_eaf9237aee405d9dfadf4e0154aa8767_cryptolocker
-
Size
77KB
-
MD5
eaf9237aee405d9dfadf4e0154aa8767
-
SHA1
2591902ab8d50fda09a7e3a903af1a7e7b0e5533
-
SHA256
14e2f7714ec1391b0f947f5bd8668f4fd4a29e1995cf7bb2697263b5f0be82dd
-
SHA512
1b28c05f3e55e227077b3b530bbbe18bfd341f8c05d0b5a8d1e8c669260aa1e4deafe1bedce8183d10825dfe35b4b3d273cc9b152805c48eba82c846b9a6a40b
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTC:ZVxkGOtEvwDpjcax/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-