General
-
Target
2024-03-25_ecd64855fccd5dfc101e55d1c3696606_cryptolocker
-
Size
48KB
-
Sample
240325-2v76laae82
-
MD5
ecd64855fccd5dfc101e55d1c3696606
-
SHA1
fa47ae041acd57a9f1870ea8cb9657f95296abab
-
SHA256
8344de4e5aa55c994cb37ea866e968ea0427dc2f3ed10e5d27f76afa5fc839da
-
SHA512
ac7d06e829e15d7e95be6b668fbf447f8071db5b46b6a594ff4e19b04bf09b5b301fdb8f78264e15a82d2e6715fc25c2134ae9faac38d06fa2a76c65687b853a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD9x:bgGYcA/53GAA6y37nbyx
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_ecd64855fccd5dfc101e55d1c3696606_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_ecd64855fccd5dfc101e55d1c3696606_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-25_ecd64855fccd5dfc101e55d1c3696606_cryptolocker
-
Size
48KB
-
MD5
ecd64855fccd5dfc101e55d1c3696606
-
SHA1
fa47ae041acd57a9f1870ea8cb9657f95296abab
-
SHA256
8344de4e5aa55c994cb37ea866e968ea0427dc2f3ed10e5d27f76afa5fc839da
-
SHA512
ac7d06e829e15d7e95be6b668fbf447f8071db5b46b6a594ff4e19b04bf09b5b301fdb8f78264e15a82d2e6715fc25c2134ae9faac38d06fa2a76c65687b853a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD9x:bgGYcA/53GAA6y37nbyx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-