General
-
Target
2024-03-28_f9fcb35f3886783c29a7257fa947a3d7_cryptolocker
-
Size
50KB
-
Sample
240328-sa9dgsaa69
-
MD5
f9fcb35f3886783c29a7257fa947a3d7
-
SHA1
279d739ea75dd4c57d27fe3a94223c7b2ea843fe
-
SHA256
5fd355fb581612625ff9e0db01d97ad0e829cb609a24efd427df168d881411b2
-
SHA512
fb783714a2981d109d53e4e08af1004049b21bcbed0ccc233ff2fe63742a42d156700a79b82addbb8b11ebb5574ae85da193f218179f6117f46967c9176001c0
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSOL:bgGYcA/53GAA6y37Q6dI+d54
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_f9fcb35f3886783c29a7257fa947a3d7_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-28_f9fcb35f3886783c29a7257fa947a3d7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-28_f9fcb35f3886783c29a7257fa947a3d7_cryptolocker
-
Size
50KB
-
MD5
f9fcb35f3886783c29a7257fa947a3d7
-
SHA1
279d739ea75dd4c57d27fe3a94223c7b2ea843fe
-
SHA256
5fd355fb581612625ff9e0db01d97ad0e829cb609a24efd427df168d881411b2
-
SHA512
fb783714a2981d109d53e4e08af1004049b21bcbed0ccc233ff2fe63742a42d156700a79b82addbb8b11ebb5574ae85da193f218179f6117f46967c9176001c0
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSOL:bgGYcA/53GAA6y37Q6dI+d54
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-