General
-
Target
2024-02-17_d7d208317fc8f1d61cd75ec7ca78c868_cryptolocker
-
Size
125KB
-
Sample
240217-jrxatacf5x
-
MD5
d7d208317fc8f1d61cd75ec7ca78c868
-
SHA1
71243bdbbeebfe845bcaae1d9532d24036427cbf
-
SHA256
00b26fd9dbce033385d72ec19797ae793e7996167fb6bb822e2976897acb0f42
-
SHA512
21875f0e9772ba43be1fa13d46fdd1c70b3f95f7e7e56c6110ea73f54198287d5fcdf42b6e07d34ff7534d36b71c282e648e17875538ab6bcd894ec4c2b035d0
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LIi:vCjsIOtEvwDpj5H9YvQd2RT
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_d7d208317fc8f1d61cd75ec7ca78c868_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-17_d7d208317fc8f1d61cd75ec7ca78c868_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-17_d7d208317fc8f1d61cd75ec7ca78c868_cryptolocker
-
Size
125KB
-
MD5
d7d208317fc8f1d61cd75ec7ca78c868
-
SHA1
71243bdbbeebfe845bcaae1d9532d24036427cbf
-
SHA256
00b26fd9dbce033385d72ec19797ae793e7996167fb6bb822e2976897acb0f42
-
SHA512
21875f0e9772ba43be1fa13d46fdd1c70b3f95f7e7e56c6110ea73f54198287d5fcdf42b6e07d34ff7534d36b71c282e648e17875538ab6bcd894ec4c2b035d0
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LIi:vCjsIOtEvwDpj5H9YvQd2RT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-