General
-
Target
2024-01-28_25a19e4daba08a40dbff07ea101fde94_cryptolocker
-
Size
47KB
-
Sample
240128-qmzcyabeb7
-
MD5
25a19e4daba08a40dbff07ea101fde94
-
SHA1
032f40f1cabee1826fc5fb7dec5e26652879ab0d
-
SHA256
60b1b4ef59b13f9dcd5dc51839d38ca6c9413242bd709058e15aa33ff0dad1a2
-
SHA512
433c256e8470328afa4f329c5cbbae55f6574c277acece68e64fa10c970793775d6b37430feb7118cd7390dd9a42aa3bfbd9c4080bba43b4bfebcacbb3fa3866
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxY:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_25a19e4daba08a40dbff07ea101fde94_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_25a19e4daba08a40dbff07ea101fde94_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-28_25a19e4daba08a40dbff07ea101fde94_cryptolocker
-
Size
47KB
-
MD5
25a19e4daba08a40dbff07ea101fde94
-
SHA1
032f40f1cabee1826fc5fb7dec5e26652879ab0d
-
SHA256
60b1b4ef59b13f9dcd5dc51839d38ca6c9413242bd709058e15aa33ff0dad1a2
-
SHA512
433c256e8470328afa4f329c5cbbae55f6574c277acece68e64fa10c970793775d6b37430feb7118cd7390dd9a42aa3bfbd9c4080bba43b4bfebcacbb3fa3866
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxY:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XJ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-