General
-
Target
2024-03-27_f0e19e38211075899eb88293c7d1dea2_cryptolocker
-
Size
40KB
-
Sample
240327-ytkgcseb7x
-
MD5
f0e19e38211075899eb88293c7d1dea2
-
SHA1
cc1cff3aabd6eebb049312f42134ade8814f4f70
-
SHA256
f4855d30e0999e226098651c6c1664207b2aa471b1696764fae88692ce1484cd
-
SHA512
56ed452720dbce2711dd80573275d6ee9b44d242ab1b0abf391a1651f5c6a5c69d9bf3db01e84129776c86705c8e7994ec2c7904225e41fe8cb9c2413f333f20
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnG:bCDOw9aMDooc+vAG
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_f0e19e38211075899eb88293c7d1dea2_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-27_f0e19e38211075899eb88293c7d1dea2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_f0e19e38211075899eb88293c7d1dea2_cryptolocker
-
Size
40KB
-
MD5
f0e19e38211075899eb88293c7d1dea2
-
SHA1
cc1cff3aabd6eebb049312f42134ade8814f4f70
-
SHA256
f4855d30e0999e226098651c6c1664207b2aa471b1696764fae88692ce1484cd
-
SHA512
56ed452720dbce2711dd80573275d6ee9b44d242ab1b0abf391a1651f5c6a5c69d9bf3db01e84129776c86705c8e7994ec2c7904225e41fe8cb9c2413f333f20
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnG:bCDOw9aMDooc+vAG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-