General
-
Target
2024-03-18_6af1beff311b1539a5de9f9a08dbc52c_cryptolocker
-
Size
51KB
-
Sample
240318-s3rddacb65
-
MD5
6af1beff311b1539a5de9f9a08dbc52c
-
SHA1
630c03694ed97d97d4730759fc6db1fbcbe048e7
-
SHA256
e270307e2381ce2eb9754c87e17e1a03ab1474d5df6001bca689a1c8f4bf4f91
-
SHA512
043fc3fd75d0c96966961258f60a02a7eba7eea94a66cd1863e77a07e9e07421b6c3faabebed14aa5ff6f5f0ebe567785bc10ac059570e2270532b5d1392376e
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPxyV4tFVgQe:bIDOw9a0Dwo3P1ojvUSD4PRtFVgX
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-18_6af1beff311b1539a5de9f9a08dbc52c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-18_6af1beff311b1539a5de9f9a08dbc52c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-18_6af1beff311b1539a5de9f9a08dbc52c_cryptolocker
-
Size
51KB
-
MD5
6af1beff311b1539a5de9f9a08dbc52c
-
SHA1
630c03694ed97d97d4730759fc6db1fbcbe048e7
-
SHA256
e270307e2381ce2eb9754c87e17e1a03ab1474d5df6001bca689a1c8f4bf4f91
-
SHA512
043fc3fd75d0c96966961258f60a02a7eba7eea94a66cd1863e77a07e9e07421b6c3faabebed14aa5ff6f5f0ebe567785bc10ac059570e2270532b5d1392376e
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPxyV4tFVgQe:bIDOw9a0Dwo3P1ojvUSD4PRtFVgX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-