General
-
Target
2024-03-27_af143e9f5e99f2728788f4a872c2fcd0_cryptolocker
-
Size
50KB
-
Sample
240327-3gpyjadd22
-
MD5
af143e9f5e99f2728788f4a872c2fcd0
-
SHA1
89ccc8f0aa773608755731be3b6144e847c20422
-
SHA256
e7687d3cfe3f55e8e503a00c928cf689044dd9daefcf4392063c6a2d57299adf
-
SHA512
3f3d1d0a1067178a9c0a0669dc019d0fc5d66cdd4a4caba3f01612390989a2625db4e563e5a44f0c3b4d8e7db3e01814751f3cbe336ab5631f0fb636a35b37f7
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gsx:bgGYcA/53GAA6y37Q6dI+d5QGsx
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_af143e9f5e99f2728788f4a872c2fcd0_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-27_af143e9f5e99f2728788f4a872c2fcd0_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_af143e9f5e99f2728788f4a872c2fcd0_cryptolocker
-
Size
50KB
-
MD5
af143e9f5e99f2728788f4a872c2fcd0
-
SHA1
89ccc8f0aa773608755731be3b6144e847c20422
-
SHA256
e7687d3cfe3f55e8e503a00c928cf689044dd9daefcf4392063c6a2d57299adf
-
SHA512
3f3d1d0a1067178a9c0a0669dc019d0fc5d66cdd4a4caba3f01612390989a2625db4e563e5a44f0c3b4d8e7db3e01814751f3cbe336ab5631f0fb636a35b37f7
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gsx:bgGYcA/53GAA6y37Q6dI+d5QGsx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-