General
-
Target
2024-01-24_de20c8f921c414f9581878b0636f0780_cryptolocker
-
Size
80KB
-
Sample
240124-fgsyvsbcf4
-
MD5
de20c8f921c414f9581878b0636f0780
-
SHA1
555f9c7861438e8c18e9b1b60e74df5d5593206c
-
SHA256
f743051caabd70ceaed010989415d97805692d56813d75525966a79720d800a6
-
SHA512
6437960515a4ebfbad7b3ce80027e1eb362ed88e437a003f93a193519a368ced5a389a784b883aa764afb22e024c76a8341ad05dd10f5e63248ccdd629c18ada
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBmkq:vCjsIOtEvwDpj5H9YvQd2zq
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_de20c8f921c414f9581878b0636f0780_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_de20c8f921c414f9581878b0636f0780_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_de20c8f921c414f9581878b0636f0780_cryptolocker
-
Size
80KB
-
MD5
de20c8f921c414f9581878b0636f0780
-
SHA1
555f9c7861438e8c18e9b1b60e74df5d5593206c
-
SHA256
f743051caabd70ceaed010989415d97805692d56813d75525966a79720d800a6
-
SHA512
6437960515a4ebfbad7b3ce80027e1eb362ed88e437a003f93a193519a368ced5a389a784b883aa764afb22e024c76a8341ad05dd10f5e63248ccdd629c18ada
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBmkq:vCjsIOtEvwDpj5H9YvQd2zq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-