General
-
Target
2024-03-18_02d46c806166855de068503665bba904_cryptolocker
-
Size
35KB
-
Sample
240318-plndlshc4v
-
MD5
02d46c806166855de068503665bba904
-
SHA1
f9d9f7e007d2704d7152b43b69c5382137638dd7
-
SHA256
e955c1e5e5bf4f6948e8585d44d48969594dbad1fff89961da1e99e2030447ed
-
SHA512
b18c03a3a5cdbac69297ded9727a329917b07a06f8a87805d1341fe8bbb1557b6c8f6e5960f58f4e4c8466fdb706bf713b464518abfa86576fb4bcc87df610c8
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lm1mH:bA74zYcgT/Ekd0ryfjPIunqpeNswm9Q
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-18_02d46c806166855de068503665bba904_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-18_02d46c806166855de068503665bba904_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-18_02d46c806166855de068503665bba904_cryptolocker
-
Size
35KB
-
MD5
02d46c806166855de068503665bba904
-
SHA1
f9d9f7e007d2704d7152b43b69c5382137638dd7
-
SHA256
e955c1e5e5bf4f6948e8585d44d48969594dbad1fff89961da1e99e2030447ed
-
SHA512
b18c03a3a5cdbac69297ded9727a329917b07a06f8a87805d1341fe8bbb1557b6c8f6e5960f58f4e4c8466fdb706bf713b464518abfa86576fb4bcc87df610c8
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lm1mH:bA74zYcgT/Ekd0ryfjPIunqpeNswm9Q
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-