General
-
Target
2024-03-15_a053a5e46927a2047a9fb4c18d6cb97d_cryptolocker
-
Size
29KB
-
Sample
240315-wadhlaef31
-
MD5
a053a5e46927a2047a9fb4c18d6cb97d
-
SHA1
e8d1481f8cc64bdb85a3ab65c2ab543b67a97e6d
-
SHA256
8f97f2577a154925df8ea97ec44e35d8bbd6de3bdeabc4bd5aa93b2f26a87618
-
SHA512
1397a2f14618f5d541e7f075ecbd3e8134b0ef01d2d86305e34d1cedd8a8511a4dc98e0bc09c1f495883c1cc61a15fe5b0211433ed939aa50edc8647e68387e2
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJlkUA0:bA74zYcgT/Ekd0ryfjQRS4Ub
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_a053a5e46927a2047a9fb4c18d6cb97d_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-15_a053a5e46927a2047a9fb4c18d6cb97d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_a053a5e46927a2047a9fb4c18d6cb97d_cryptolocker
-
Size
29KB
-
MD5
a053a5e46927a2047a9fb4c18d6cb97d
-
SHA1
e8d1481f8cc64bdb85a3ab65c2ab543b67a97e6d
-
SHA256
8f97f2577a154925df8ea97ec44e35d8bbd6de3bdeabc4bd5aa93b2f26a87618
-
SHA512
1397a2f14618f5d541e7f075ecbd3e8134b0ef01d2d86305e34d1cedd8a8511a4dc98e0bc09c1f495883c1cc61a15fe5b0211433ed939aa50edc8647e68387e2
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJlkUA0:bA74zYcgT/Ekd0ryfjQRS4Ub
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-