General
-
Target
2024-03-15_ffc90e0a2a4463ff2ab48168308b43e0_cryptolocker
-
Size
31KB
-
Sample
240315-mantwsdh7w
-
MD5
ffc90e0a2a4463ff2ab48168308b43e0
-
SHA1
b420a8461514d4fcb6f7d094139653630bd2e793
-
SHA256
1a3ced62893481e76efa628044e2dcc2f38582b1e1e7999cab7b98af1ccc0b97
-
SHA512
01e0018f088c262c3b45ba3fb756de43a556b7c72d9a5fed9ebd218a5f6d531959aad8ecf29f02aa0ccfbd76146d7b0009cf9c41d930c5cdc4e0dfd762b753a3
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SDr:bA74zYcgT/Ekd0ryfjQRSNhpSDr
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_ffc90e0a2a4463ff2ab48168308b43e0_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-15_ffc90e0a2a4463ff2ab48168308b43e0_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_ffc90e0a2a4463ff2ab48168308b43e0_cryptolocker
-
Size
31KB
-
MD5
ffc90e0a2a4463ff2ab48168308b43e0
-
SHA1
b420a8461514d4fcb6f7d094139653630bd2e793
-
SHA256
1a3ced62893481e76efa628044e2dcc2f38582b1e1e7999cab7b98af1ccc0b97
-
SHA512
01e0018f088c262c3b45ba3fb756de43a556b7c72d9a5fed9ebd218a5f6d531959aad8ecf29f02aa0ccfbd76146d7b0009cf9c41d930c5cdc4e0dfd762b753a3
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SDr:bA74zYcgT/Ekd0ryfjQRSNhpSDr
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-