General
-
Target
2024-02-12_3ac20069e17fdb7ed25b90fffd06c863_cryptolocker
-
Size
74KB
-
Sample
240212-2cc8haeh94
-
MD5
3ac20069e17fdb7ed25b90fffd06c863
-
SHA1
6cc537aee05fc97b7df4edad7a081f8ced100fc3
-
SHA256
7525d73d754ef0af7d09c8f18770e7558dce282a99ff227f6f489351a9bedde3
-
SHA512
13851cb2362458596f047b77996065578f4221ddd8598a2a6a33f7a1fac44a17aafeb7197eefdf09b25d6028f4a246635126be593aea096f3bd47fbe586161e4
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMoa:X6a+SOtEvwDpjBZYvQd2+
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_3ac20069e17fdb7ed25b90fffd06c863_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-12_3ac20069e17fdb7ed25b90fffd06c863_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_3ac20069e17fdb7ed25b90fffd06c863_cryptolocker
-
Size
74KB
-
MD5
3ac20069e17fdb7ed25b90fffd06c863
-
SHA1
6cc537aee05fc97b7df4edad7a081f8ced100fc3
-
SHA256
7525d73d754ef0af7d09c8f18770e7558dce282a99ff227f6f489351a9bedde3
-
SHA512
13851cb2362458596f047b77996065578f4221ddd8598a2a6a33f7a1fac44a17aafeb7197eefdf09b25d6028f4a246635126be593aea096f3bd47fbe586161e4
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMoa:X6a+SOtEvwDpjBZYvQd2+
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-