General
-
Target
2024-03-25_a613fd2b3b0946258e08692e09ced46f_cryptolocker
-
Size
43KB
-
Sample
240325-p4xp1agb93
-
MD5
a613fd2b3b0946258e08692e09ced46f
-
SHA1
cbcd70d231acf8fb1cfffc702c02a1616c985e01
-
SHA256
bd91a2a61a7f9717a13e7a1103daa372e6957714f49f59af29399fdfcfee1460
-
SHA512
1354220631c5afa3e0757279a6e363aa606d875aaebaa61fedfe14ac4c7f780ede8a99c3002f2732275afdf6886b0a290304a358eafafe2eaa4bde2c25736c79
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAV:bgGYcA/53GADw8Cl/nV
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-25_a613fd2b3b0946258e08692e09ced46f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-25_a613fd2b3b0946258e08692e09ced46f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-25_a613fd2b3b0946258e08692e09ced46f_cryptolocker
-
Size
43KB
-
MD5
a613fd2b3b0946258e08692e09ced46f
-
SHA1
cbcd70d231acf8fb1cfffc702c02a1616c985e01
-
SHA256
bd91a2a61a7f9717a13e7a1103daa372e6957714f49f59af29399fdfcfee1460
-
SHA512
1354220631c5afa3e0757279a6e363aa606d875aaebaa61fedfe14ac4c7f780ede8a99c3002f2732275afdf6886b0a290304a358eafafe2eaa4bde2c25736c79
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAV:bgGYcA/53GADw8Cl/nV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-