General
-
Target
2024-02-17_26b29dfa4a8ae43a1f59163386ad040d_cryptolocker
-
Size
50KB
-
Sample
240217-w22phahe8z
-
MD5
26b29dfa4a8ae43a1f59163386ad040d
-
SHA1
206e78454f0afcccf95991ff71918962130fd088
-
SHA256
08b6c94f91eeebb1738b364dbf7f3b15f8821350321c58a17276313e5ae9c9e0
-
SHA512
21f0787d81a8dcc4e7c5b8bebe7118474f7e53e213dcd252f03fc0fe2ba46f8f4fb45cb9c6041105f9ca8af1ea5d141c8c5dda302ffd4f81d861cbfbfeba9b6a
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcafFCk:X6QFElP6n+gJBMOtEvwDpjBtExmlnFCk
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_26b29dfa4a8ae43a1f59163386ad040d_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_26b29dfa4a8ae43a1f59163386ad040d_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_26b29dfa4a8ae43a1f59163386ad040d_cryptolocker
-
Size
50KB
-
MD5
26b29dfa4a8ae43a1f59163386ad040d
-
SHA1
206e78454f0afcccf95991ff71918962130fd088
-
SHA256
08b6c94f91eeebb1738b364dbf7f3b15f8821350321c58a17276313e5ae9c9e0
-
SHA512
21f0787d81a8dcc4e7c5b8bebe7118474f7e53e213dcd252f03fc0fe2ba46f8f4fb45cb9c6041105f9ca8af1ea5d141c8c5dda302ffd4f81d861cbfbfeba9b6a
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcafFCk:X6QFElP6n+gJBMOtEvwDpjBtExmlnFCk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-