General
-
Target
2024-02-12_737ee7c94311229e69b7103add38ada8_cryptolocker
-
Size
60KB
-
Sample
240212-ysvkyada97
-
MD5
737ee7c94311229e69b7103add38ada8
-
SHA1
ad9b14f4754c7323aa8c76eccb43ec7a30f564c9
-
SHA256
d6702faea4418978d5be50598542b8c6a54919bae074fd5fbf91e1545c1118ff
-
SHA512
22a1a6e8f55ea064ef900225275452478c87cb0ce1de4fde57592154323dbbc1b90e4f7cf818456c795bade2017edf5f1ae04d2bd29c170f7b081f3802669f4d
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLA+Nb:X6a+SOtEvwDpjBrOL
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_737ee7c94311229e69b7103add38ada8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_737ee7c94311229e69b7103add38ada8_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_737ee7c94311229e69b7103add38ada8_cryptolocker
-
Size
60KB
-
MD5
737ee7c94311229e69b7103add38ada8
-
SHA1
ad9b14f4754c7323aa8c76eccb43ec7a30f564c9
-
SHA256
d6702faea4418978d5be50598542b8c6a54919bae074fd5fbf91e1545c1118ff
-
SHA512
22a1a6e8f55ea064ef900225275452478c87cb0ce1de4fde57592154323dbbc1b90e4f7cf818456c795bade2017edf5f1ae04d2bd29c170f7b081f3802669f4d
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLA+Nb:X6a+SOtEvwDpjBrOL
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-