General
-
Target
2024-03-28_24a9c0968cb0b2407f2afc3af1020461_cryptolocker
-
Size
33KB
-
Sample
240328-kdt4zagc9x
-
MD5
24a9c0968cb0b2407f2afc3af1020461
-
SHA1
91b9ee3a547b1401d4b311adb441a806b0de1cee
-
SHA256
8ef3b351fb60f833f079ef9c3fdf24fffa05dc2b8194f4c120135c8c10afd4a2
-
SHA512
12caed1e1049bdbe504d75deef931f6b8598593651706d0f12040b678712fe79e90793273a28af626a288e4f886922de327866e6649bd990811d31e871d8d613
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+OO9KW+B:b7o/2n1TCraU6GD1a4Xt9hv
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_24a9c0968cb0b2407f2afc3af1020461_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-28_24a9c0968cb0b2407f2afc3af1020461_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-28_24a9c0968cb0b2407f2afc3af1020461_cryptolocker
-
Size
33KB
-
MD5
24a9c0968cb0b2407f2afc3af1020461
-
SHA1
91b9ee3a547b1401d4b311adb441a806b0de1cee
-
SHA256
8ef3b351fb60f833f079ef9c3fdf24fffa05dc2b8194f4c120135c8c10afd4a2
-
SHA512
12caed1e1049bdbe504d75deef931f6b8598593651706d0f12040b678712fe79e90793273a28af626a288e4f886922de327866e6649bd990811d31e871d8d613
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+OO9KW+B:b7o/2n1TCraU6GD1a4Xt9hv
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-