General
-
Target
2024-03-26_7b917bf5677b973bcb3952aa379058c8_cryptolocker
-
Size
34KB
-
Sample
240326-hfcatsde98
-
MD5
7b917bf5677b973bcb3952aa379058c8
-
SHA1
aa428b4280a811e2880a231cc4086cbd2cfe0174
-
SHA256
7e3da2c39605daa2da5875be43be719711d92bc6f9e57a81f6ee331943d36161
-
SHA512
46e3f48a87e0f76c33adba767f324b95ad4bf3a0bc590a8ec9da2e07f198aed3f7badb295cbff8e4a437b58174e79db85f4c1cf50d0ddfb33c06ff1bb14640d5
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SEMMS:bA74zYcgT/Ekd0ryfjQRSNhpSF/
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_7b917bf5677b973bcb3952aa379058c8_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-26_7b917bf5677b973bcb3952aa379058c8_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_7b917bf5677b973bcb3952aa379058c8_cryptolocker
-
Size
34KB
-
MD5
7b917bf5677b973bcb3952aa379058c8
-
SHA1
aa428b4280a811e2880a231cc4086cbd2cfe0174
-
SHA256
7e3da2c39605daa2da5875be43be719711d92bc6f9e57a81f6ee331943d36161
-
SHA512
46e3f48a87e0f76c33adba767f324b95ad4bf3a0bc590a8ec9da2e07f198aed3f7badb295cbff8e4a437b58174e79db85f4c1cf50d0ddfb33c06ff1bb14640d5
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke8SEMMS:bA74zYcgT/Ekd0ryfjQRSNhpSF/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-