General
-
Target
2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker
-
Size
40KB
-
Sample
240129-awsnraebe8
-
MD5
e32aba8542f128427ad86d457f299097
-
SHA1
5e0d4c4bb3e1d0a03536a426f97598a4be177d27
-
SHA256
3f9776bd5fb5386b0d7e90b6ac68c736d9be44e1e0b5dc8e693ff6063fca4228
-
SHA512
cc01e0aae2ae2dfee5ca7cb5b88aae5dc21380e79616ca499b3f17ade814f229afe7ff192c2fb3410c68aef619fdcbbe1fab870fa96bcf129ee328ca1e6ca2e2
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxLlA:79inqyNR/QtOOtEvwDpjBKcmfxC
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-29_e32aba8542f128427ad86d457f299097_cryptolocker
-
Size
40KB
-
MD5
e32aba8542f128427ad86d457f299097
-
SHA1
5e0d4c4bb3e1d0a03536a426f97598a4be177d27
-
SHA256
3f9776bd5fb5386b0d7e90b6ac68c736d9be44e1e0b5dc8e693ff6063fca4228
-
SHA512
cc01e0aae2ae2dfee5ca7cb5b88aae5dc21380e79616ca499b3f17ade814f229afe7ff192c2fb3410c68aef619fdcbbe1fab870fa96bcf129ee328ca1e6ca2e2
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/Wcz0BVFHxLlA:79inqyNR/QtOOtEvwDpjBKcmfxC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-