General
-
Target
2024-04-06_a6c39861b7f2dbe5b2cc2311777af3ef_cryptolocker
-
Size
43KB
-
Sample
240406-fkrj7sbb6s
-
MD5
a6c39861b7f2dbe5b2cc2311777af3ef
-
SHA1
b4ad253f9d64a7b7d1a4a5179c54f7d295130375
-
SHA256
0167fba94f3bd038043e1c7ac7af9e1022ed16c4226ee8db241f27ebf085b3db
-
SHA512
7cbde46634f740c0bc46d1b4416faaa3a27446e4116a8afe1830a82e7f97010ee72c63799e077dbe2702940fe100b42d966b94deae5daf66be04a826c88b642e
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpPSy/:bc/y2lm6Y0AqJ51VPP/
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_a6c39861b7f2dbe5b2cc2311777af3ef_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-06_a6c39861b7f2dbe5b2cc2311777af3ef_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-06_a6c39861b7f2dbe5b2cc2311777af3ef_cryptolocker
-
Size
43KB
-
MD5
a6c39861b7f2dbe5b2cc2311777af3ef
-
SHA1
b4ad253f9d64a7b7d1a4a5179c54f7d295130375
-
SHA256
0167fba94f3bd038043e1c7ac7af9e1022ed16c4226ee8db241f27ebf085b3db
-
SHA512
7cbde46634f740c0bc46d1b4416faaa3a27446e4116a8afe1830a82e7f97010ee72c63799e077dbe2702940fe100b42d966b94deae5daf66be04a826c88b642e
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51jpPSy/:bc/y2lm6Y0AqJ51VPP/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-