General
-
Target
2024-02-18_a10f779ba437f69d1516f1dd56fe91a2_cryptolocker
-
Size
50KB
-
Sample
240218-lznpragf3x
-
MD5
a10f779ba437f69d1516f1dd56fe91a2
-
SHA1
ad32588f25484ef832a79384f3f5c42ad913f185
-
SHA256
983d7aa7f70120b86a59255b7ccf052081ac64daf9c842d3052b5ac380229702
-
SHA512
bc64a8080c9ff8ec43aec1064e9cbb5c512c6293ed046fb3298d2c73442e75f46719bd5be0f1b698aaa448dda31f897b46f0694ab6a6229b8b4be1a3663e29d0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlca968:X6QFElP6n+gJBMOtEvwDpjBtExmlFb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_a10f779ba437f69d1516f1dd56fe91a2_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_a10f779ba437f69d1516f1dd56fe91a2_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_a10f779ba437f69d1516f1dd56fe91a2_cryptolocker
-
Size
50KB
-
MD5
a10f779ba437f69d1516f1dd56fe91a2
-
SHA1
ad32588f25484ef832a79384f3f5c42ad913f185
-
SHA256
983d7aa7f70120b86a59255b7ccf052081ac64daf9c842d3052b5ac380229702
-
SHA512
bc64a8080c9ff8ec43aec1064e9cbb5c512c6293ed046fb3298d2c73442e75f46719bd5be0f1b698aaa448dda31f897b46f0694ab6a6229b8b4be1a3663e29d0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlca968:X6QFElP6n+gJBMOtEvwDpjBtExmlFb
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-