General
-
Target
2024-02-01_af2dd609f6db5f11488a45584cfeedb6_cryptolocker
-
Size
125KB
-
Sample
240201-ljjqvsbdgn
-
MD5
af2dd609f6db5f11488a45584cfeedb6
-
SHA1
06af13db299e86798f17727074c6d15f8ede68bb
-
SHA256
6ff2df7f10354b7dae5a76f10668bf9d75e1820d86c9c7b3fd6c3266ba114017
-
SHA512
c7a50c8bee47757a7cc1b25b3f5dff33342409f94ba34d6a247fc45fc1e9dea21c70733850c40d08e08f59591f48d6685f63fad813d657dbc2e92d1c4193d0da
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpV:vCA9OtEvwDpjZ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_af2dd609f6db5f11488a45584cfeedb6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_af2dd609f6db5f11488a45584cfeedb6_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-01_af2dd609f6db5f11488a45584cfeedb6_cryptolocker
-
Size
125KB
-
MD5
af2dd609f6db5f11488a45584cfeedb6
-
SHA1
06af13db299e86798f17727074c6d15f8ede68bb
-
SHA256
6ff2df7f10354b7dae5a76f10668bf9d75e1820d86c9c7b3fd6c3266ba114017
-
SHA512
c7a50c8bee47757a7cc1b25b3f5dff33342409f94ba34d6a247fc45fc1e9dea21c70733850c40d08e08f59591f48d6685f63fad813d657dbc2e92d1c4193d0da
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpV:vCA9OtEvwDpjZ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-