General
-
Target
2024-02-17_8c0223e4651b9c4ecd74e14f3788d080_cryptolocker
-
Size
50KB
-
Sample
240217-2s3s4aca62
-
MD5
8c0223e4651b9c4ecd74e14f3788d080
-
SHA1
f6a4b444172d9ac3db7c734af3a97e37e89b4599
-
SHA256
538d67d8e58805802caefa1c738ac469e1efb2880d7d2a62079e8217a08fd79c
-
SHA512
b913931f0a596bf7ead74fa0991e1ea890d727572e1f7dda6c3ac938a23e12a3d04d89d5f2005ab0d717db30b0a15f556a7fbf2b9b7b6254a8a377de738dc31b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRc2o:79mqyNhQMOtEvwDpjBxe8TpXRPo
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_8c0223e4651b9c4ecd74e14f3788d080_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_8c0223e4651b9c4ecd74e14f3788d080_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_8c0223e4651b9c4ecd74e14f3788d080_cryptolocker
-
Size
50KB
-
MD5
8c0223e4651b9c4ecd74e14f3788d080
-
SHA1
f6a4b444172d9ac3db7c734af3a97e37e89b4599
-
SHA256
538d67d8e58805802caefa1c738ac469e1efb2880d7d2a62079e8217a08fd79c
-
SHA512
b913931f0a596bf7ead74fa0991e1ea890d727572e1f7dda6c3ac938a23e12a3d04d89d5f2005ab0d717db30b0a15f556a7fbf2b9b7b6254a8a377de738dc31b
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRc2o:79mqyNhQMOtEvwDpjBxe8TpXRPo
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-