General
-
Target
2024-01-23_718b0c914c47ff774b5b2c4a27085114_cryptolocker
-
Size
47KB
-
Sample
240123-w7t7lsfcb3
-
MD5
718b0c914c47ff774b5b2c4a27085114
-
SHA1
7ea6dc55be3c35195f18bb0b5aabc1a09ac9206d
-
SHA256
6e165cd606dbb732ca96dee3695b8cf123998a25c2c5fdac42f0cc7d7f47426c
-
SHA512
3d2e7610a5aa7b0863b697495f4e0b497f41436d6c1e7bf95e847b2d02124d5f946f479f22cbcc28c113f73299c66316ef94071a762a923ed10208ac2cd1f588
-
SSDEEP
384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpz0:XS5nQJ24LR1bytOOtEvwDpjNbP/0Gg6
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_718b0c914c47ff774b5b2c4a27085114_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_718b0c914c47ff774b5b2c4a27085114_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_718b0c914c47ff774b5b2c4a27085114_cryptolocker
-
Size
47KB
-
MD5
718b0c914c47ff774b5b2c4a27085114
-
SHA1
7ea6dc55be3c35195f18bb0b5aabc1a09ac9206d
-
SHA256
6e165cd606dbb732ca96dee3695b8cf123998a25c2c5fdac42f0cc7d7f47426c
-
SHA512
3d2e7610a5aa7b0863b697495f4e0b497f41436d6c1e7bf95e847b2d02124d5f946f479f22cbcc28c113f73299c66316ef94071a762a923ed10208ac2cd1f588
-
SSDEEP
384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpz0:XS5nQJ24LR1bytOOtEvwDpjNbP/0Gg6
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-