General
-
Target
2024-03-15_117f6a366758a33b977dc80b5d25c58a_cryptolocker
-
Size
38KB
-
Sample
240315-g5zlzsbh89
-
MD5
117f6a366758a33b977dc80b5d25c58a
-
SHA1
33612e84e2bd0b00e70569cc8a8e3f9ae55cc543
-
SHA256
7efe3ae72033dce5c5933495283acad88819b4c5c5b73bb38e4f29e9ccae887d
-
SHA512
a0b26eaf0cdc431ecc2dab8188f6568045ee958847d5f164ea3fdb956c19203423551184f2c8b8242b17cee2ed8d17d70b79a0a5f7e1ce463675452d9fc3a48c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754Xcwb:bxNrC7kYo1Fxf3s05rwb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_117f6a366758a33b977dc80b5d25c58a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_117f6a366758a33b977dc80b5d25c58a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_117f6a366758a33b977dc80b5d25c58a_cryptolocker
-
Size
38KB
-
MD5
117f6a366758a33b977dc80b5d25c58a
-
SHA1
33612e84e2bd0b00e70569cc8a8e3f9ae55cc543
-
SHA256
7efe3ae72033dce5c5933495283acad88819b4c5c5b73bb38e4f29e9ccae887d
-
SHA512
a0b26eaf0cdc431ecc2dab8188f6568045ee958847d5f164ea3fdb956c19203423551184f2c8b8242b17cee2ed8d17d70b79a0a5f7e1ce463675452d9fc3a48c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754Xcwb:bxNrC7kYo1Fxf3s05rwb
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-