General
-
Target
2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker
-
Size
37KB
-
Sample
240325-3l2swsag83
-
MD5
db6ce5ab88dcdbd3fdfc4a513abbe707
-
SHA1
c43920a435916113b592c0f13f7f476f20dc6aff
-
SHA256
b18510f6d6bfacfd67cdbc2b63ec59792be8c8755856649a5f0bc0d4d1f440c6
-
SHA512
ff9b2f720c08a1932a73c2344705dbbf431aa4f4efb9185b703d29307febdacfea049c11cb8fe241563fe181e68fa0638d488db77957789ed16e31b0c671924f
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenU7:ZzFbxmLPWQMOtEvwDpjLeG
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_db6ce5ab88dcdbd3fdfc4a513abbe707_cryptolocker
-
Size
37KB
-
MD5
db6ce5ab88dcdbd3fdfc4a513abbe707
-
SHA1
c43920a435916113b592c0f13f7f476f20dc6aff
-
SHA256
b18510f6d6bfacfd67cdbc2b63ec59792be8c8755856649a5f0bc0d4d1f440c6
-
SHA512
ff9b2f720c08a1932a73c2344705dbbf431aa4f4efb9185b703d29307febdacfea049c11cb8fe241563fe181e68fa0638d488db77957789ed16e31b0c671924f
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenU7:ZzFbxmLPWQMOtEvwDpjLeG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-