General
-
Target
2024-02-17_6189f21e40ccfd03a4b0990593cc0faf_cryptolocker
-
Size
45KB
-
Sample
240217-p9pxcafb6s
-
MD5
6189f21e40ccfd03a4b0990593cc0faf
-
SHA1
74e582bab4363d4c8182dfb4c84008ead3560032
-
SHA256
073bec0dc3f3f14aa049a03eaf70226dfbccc077e39fad323cddee7fd1f4d24c
-
SHA512
fbd71bfb44ab95c9246966bc3aad0caa63f05a197efceb45546d14f15b994d018d61d220e0e294f8a2e9e7b9c6fe16c195fab5dcea3b5bd75f9b13c70428e21f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlO:X6QFElP6n+gJQMOtEvwDpjB0GIWSlO
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_6189f21e40ccfd03a4b0990593cc0faf_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_6189f21e40ccfd03a4b0990593cc0faf_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_6189f21e40ccfd03a4b0990593cc0faf_cryptolocker
-
Size
45KB
-
MD5
6189f21e40ccfd03a4b0990593cc0faf
-
SHA1
74e582bab4363d4c8182dfb4c84008ead3560032
-
SHA256
073bec0dc3f3f14aa049a03eaf70226dfbccc077e39fad323cddee7fd1f4d24c
-
SHA512
fbd71bfb44ab95c9246966bc3aad0caa63f05a197efceb45546d14f15b994d018d61d220e0e294f8a2e9e7b9c6fe16c195fab5dcea3b5bd75f9b13c70428e21f
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlO:X6QFElP6n+gJQMOtEvwDpjB0GIWSlO
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-