General
-
Target
2024-02-03_adff2527fc69f7f88ed0b0842d1bf895_cryptolocker
-
Size
97KB
-
Sample
240203-atpt3sfbdr
-
MD5
adff2527fc69f7f88ed0b0842d1bf895
-
SHA1
a1ae0447835dd4c7e6e949e07a4ef96d55df5df1
-
SHA256
cda99a149c45cec10b50c9d879b38beda69aee75a103ca7a36d695348b2ae2bc
-
SHA512
0737c301899a4c3bb51374bad55f1634a772280e93481ace2c239780131ad6c81363df165f17a222f46cf4236dabb059bb372c32f562ea99c57308c030c04a71
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCJt:26a+2OtEvwDpjtzo
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_adff2527fc69f7f88ed0b0842d1bf895_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_adff2527fc69f7f88ed0b0842d1bf895_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-03_adff2527fc69f7f88ed0b0842d1bf895_cryptolocker
-
Size
97KB
-
MD5
adff2527fc69f7f88ed0b0842d1bf895
-
SHA1
a1ae0447835dd4c7e6e949e07a4ef96d55df5df1
-
SHA256
cda99a149c45cec10b50c9d879b38beda69aee75a103ca7a36d695348b2ae2bc
-
SHA512
0737c301899a4c3bb51374bad55f1634a772280e93481ace2c239780131ad6c81363df165f17a222f46cf4236dabb059bb372c32f562ea99c57308c030c04a71
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCJt:26a+2OtEvwDpjtzo
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-