General
-
Target
2024-01-18_7ba94a6cbbbe34fb977c9435c914f7e1_cryptolocker
-
Size
59KB
-
Sample
240118-2xqpbsdeel
-
MD5
7ba94a6cbbbe34fb977c9435c914f7e1
-
SHA1
5d996fcff6dd094ba0c57ebbc4da654b2dc4acdc
-
SHA256
a22383c8a06b54f15f4572ee4b13f9406ab3ca1219c60dd49ba78f1537443fe9
-
SHA512
b46df12071ecf9cf01d601b6c2343f739a159beab34271f6abe1a400425481f8c766d18fa69ff0f33b63fd2b1429852fdad3829f1f1900e099d52d4312769051
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMYIZ:TCjsIOtEvwDpj5HE/OUHnSMk
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_7ba94a6cbbbe34fb977c9435c914f7e1_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_7ba94a6cbbbe34fb977c9435c914f7e1_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-18_7ba94a6cbbbe34fb977c9435c914f7e1_cryptolocker
-
Size
59KB
-
MD5
7ba94a6cbbbe34fb977c9435c914f7e1
-
SHA1
5d996fcff6dd094ba0c57ebbc4da654b2dc4acdc
-
SHA256
a22383c8a06b54f15f4572ee4b13f9406ab3ca1219c60dd49ba78f1537443fe9
-
SHA512
b46df12071ecf9cf01d601b6c2343f739a159beab34271f6abe1a400425481f8c766d18fa69ff0f33b63fd2b1429852fdad3829f1f1900e099d52d4312769051
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMYIZ:TCjsIOtEvwDpj5HE/OUHnSMk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-