General
-
Target
2024-01-29_5a569d8a67aa4a61d44861abf45ea67c_cryptolocker
-
Size
56KB
-
Sample
240129-s4nc4sdag4
-
MD5
5a569d8a67aa4a61d44861abf45ea67c
-
SHA1
fa28503abea49fe192a27a46c4b85cf4f0ee6a84
-
SHA256
c9d0e5240f1cfee99734b9b1775b329ca28e75d56fe92699f9662c65b33c379e
-
SHA512
80cc00e42b0556a23951c1624b8c038a6b36ed8e34a57758df1e68f345d62edcdad51e0419031ca3b9184e3b154e91688305fdee191b1969b69fa688c93e5efc
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPt547/4h:V6QFElP6n+gMQMOtEvwDpjyaLccVCb4h
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-29_5a569d8a67aa4a61d44861abf45ea67c_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-29_5a569d8a67aa4a61d44861abf45ea67c_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-29_5a569d8a67aa4a61d44861abf45ea67c_cryptolocker
-
Size
56KB
-
MD5
5a569d8a67aa4a61d44861abf45ea67c
-
SHA1
fa28503abea49fe192a27a46c4b85cf4f0ee6a84
-
SHA256
c9d0e5240f1cfee99734b9b1775b329ca28e75d56fe92699f9662c65b33c379e
-
SHA512
80cc00e42b0556a23951c1624b8c038a6b36ed8e34a57758df1e68f345d62edcdad51e0419031ca3b9184e3b154e91688305fdee191b1969b69fa688c93e5efc
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPt547/4h:V6QFElP6n+gMQMOtEvwDpjyaLccVCb4h
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-