General
-
Target
2024-01-24_eb6ad122a9b662b43dd2c06b1e50fba0_cryptolocker
-
Size
53KB
-
Sample
240124-qsntdsbebm
-
MD5
eb6ad122a9b662b43dd2c06b1e50fba0
-
SHA1
213dbed64777d854541c1df260369f5f51198d4c
-
SHA256
ab897479e48a4327a979716261b5e27eef2def3a494331b244aa9e01dc9cf076
-
SHA512
b52a1b022acb856f30965039d404a92c49c7a25ecbe0c8a9f9a6e401e281cd700f2519029ebedec5961cb247426ae0de837bcea13b6ed2f2d9c5cc71c73c8e35
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LN7L:X6QFElP6n+gJBMOtEvwDpjBtE1yILN
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_eb6ad122a9b662b43dd2c06b1e50fba0_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-24_eb6ad122a9b662b43dd2c06b1e50fba0_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_eb6ad122a9b662b43dd2c06b1e50fba0_cryptolocker
-
Size
53KB
-
MD5
eb6ad122a9b662b43dd2c06b1e50fba0
-
SHA1
213dbed64777d854541c1df260369f5f51198d4c
-
SHA256
ab897479e48a4327a979716261b5e27eef2def3a494331b244aa9e01dc9cf076
-
SHA512
b52a1b022acb856f30965039d404a92c49c7a25ecbe0c8a9f9a6e401e281cd700f2519029ebedec5961cb247426ae0de837bcea13b6ed2f2d9c5cc71c73c8e35
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LN7L:X6QFElP6n+gJBMOtEvwDpjBtE1yILN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-