General
-
Target
2024-01-24_423052d4fef8006037cc8dfdf57273cd_cryptolocker
-
Size
72KB
-
Sample
240124-kb4kmadhdr
-
MD5
423052d4fef8006037cc8dfdf57273cd
-
SHA1
2231a7d2777258df3df77aff24fae59fafc83afe
-
SHA256
a0c486a2d05e10e6f00da00dafe13180eba50937a5f162e3d9e3d413941e8a68
-
SHA512
17cfeea798932e2ccfb467b1fdaf4a2db905af425989c61509415603d4b08e3b4dbdece95baf08d62941edcabd52d5a7b70f15bb0540c82f442c4630deb4c7c7
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1RF:X6a+SOtEvwDpjBZYvQd2T
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_423052d4fef8006037cc8dfdf57273cd_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-24_423052d4fef8006037cc8dfdf57273cd_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_423052d4fef8006037cc8dfdf57273cd_cryptolocker
-
Size
72KB
-
MD5
423052d4fef8006037cc8dfdf57273cd
-
SHA1
2231a7d2777258df3df77aff24fae59fafc83afe
-
SHA256
a0c486a2d05e10e6f00da00dafe13180eba50937a5f162e3d9e3d413941e8a68
-
SHA512
17cfeea798932e2ccfb467b1fdaf4a2db905af425989c61509415603d4b08e3b4dbdece95baf08d62941edcabd52d5a7b70f15bb0540c82f442c4630deb4c7c7
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1RF:X6a+SOtEvwDpjBZYvQd2T
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-