General
-
Target
2024-02-11_d388221a6559fcf99e6779888f2b5665_cryptolocker
-
Size
49KB
-
Sample
240211-1n89msbh3x
-
MD5
d388221a6559fcf99e6779888f2b5665
-
SHA1
705b0867e25ba0cc97f903fd6ce143ccd3035344
-
SHA256
9eed39ba8412356f268bfc57d4a7f4aa50d6249c6d679f309da3f2b4b18522a8
-
SHA512
b5e4e005a1aaa1a64d31d6b55ff56ec1319c44a3232fb0631ed4b2ed431f2583dd00a6f400b8ee89da3e539eb175e7d400d7aee87bd87c4136df936a6aed7f2b
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxU:X6QFElP6n+gJBMOtEvwDpjBtExU
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_d388221a6559fcf99e6779888f2b5665_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_d388221a6559fcf99e6779888f2b5665_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-11_d388221a6559fcf99e6779888f2b5665_cryptolocker
-
Size
49KB
-
MD5
d388221a6559fcf99e6779888f2b5665
-
SHA1
705b0867e25ba0cc97f903fd6ce143ccd3035344
-
SHA256
9eed39ba8412356f268bfc57d4a7f4aa50d6249c6d679f309da3f2b4b18522a8
-
SHA512
b5e4e005a1aaa1a64d31d6b55ff56ec1319c44a3232fb0631ed4b2ed431f2583dd00a6f400b8ee89da3e539eb175e7d400d7aee87bd87c4136df936a6aed7f2b
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxU:X6QFElP6n+gJBMOtEvwDpjBtExU
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-