General
-
Target
2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker
-
Size
35KB
-
Sample
240316-enybgsdc67
-
MD5
0ebe84b641b929c72386d3545fb8af36
-
SHA1
6c5c53d711d60835b03f7d0405f3efbf9044bf94
-
SHA256
c5fb33b322e22f7fcf2ccb7b38e9f8031f6c852841673e656c6465d56ae12ca7
-
SHA512
3e625394a9b9cf137c2d8f8e7528d143c920a9758902d32c60c9377f9c61a22aebad959b3369dd553ee1139ee68d0b53a5dbc76ba3e6dc66a1e5be6e56397d6e
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVWb:bA74zYcgT/Ekd0ryfjPIunYwcb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-16_0ebe84b641b929c72386d3545fb8af36_cryptolocker
-
Size
35KB
-
MD5
0ebe84b641b929c72386d3545fb8af36
-
SHA1
6c5c53d711d60835b03f7d0405f3efbf9044bf94
-
SHA256
c5fb33b322e22f7fcf2ccb7b38e9f8031f6c852841673e656c6465d56ae12ca7
-
SHA512
3e625394a9b9cf137c2d8f8e7528d143c920a9758902d32c60c9377f9c61a22aebad959b3369dd553ee1139ee68d0b53a5dbc76ba3e6dc66a1e5be6e56397d6e
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVWb:bA74zYcgT/Ekd0ryfjPIunYwcb
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-