General
-
Target
2024-02-17_db2e85404fec0cd1cf220b37c9790158_cryptolocker
-
Size
74KB
-
Sample
240217-jsj2wadc47
-
MD5
db2e85404fec0cd1cf220b37c9790158
-
SHA1
01cc71ee55884e31cca7db51cc169a60e6e322c1
-
SHA256
2aeb2212966af127ea36c8c7381493fb89725ae90d8d69a0f016ed97c927e7a5
-
SHA512
fbe9283e5c5567d25c1e1bedd54629787b3e6f8513e9e324f6c0d5e0447d7885192c93630b3405f128816c4bb0087f40a7d083a012a3654262450bdff9c202fb
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1co:X6a+SOtEvwDpjBZYvQd2L
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_db2e85404fec0cd1cf220b37c9790158_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_db2e85404fec0cd1cf220b37c9790158_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_db2e85404fec0cd1cf220b37c9790158_cryptolocker
-
Size
74KB
-
MD5
db2e85404fec0cd1cf220b37c9790158
-
SHA1
01cc71ee55884e31cca7db51cc169a60e6e322c1
-
SHA256
2aeb2212966af127ea36c8c7381493fb89725ae90d8d69a0f016ed97c927e7a5
-
SHA512
fbe9283e5c5567d25c1e1bedd54629787b3e6f8513e9e324f6c0d5e0447d7885192c93630b3405f128816c4bb0087f40a7d083a012a3654262450bdff9c202fb
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1co:X6a+SOtEvwDpjBZYvQd2L
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-