General
-
Target
2024-02-18_296df5c558601cbb1bd9d6c99d98616e_cryptolocker
-
Size
81KB
-
Sample
240218-qqpmxaba62
-
MD5
296df5c558601cbb1bd9d6c99d98616e
-
SHA1
4305cb817dc1b459615d3130f3350cd22ff47a29
-
SHA256
e8ca54ffc41676c706571f4f39c0b066b44d74c4b17fae8a95aa5f8ccd0cad29
-
SHA512
2ba7d1f8b077a923fd6995dec7bf7329c9853502c64c970ce010183e8f64c5c79aa269777485fea5990337e190a4b8bac4eb4cd090bcc09b4da5c3719ad54a19
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHuX:vCjsIOtEvwDpj5H9YvQd2S
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_296df5c558601cbb1bd9d6c99d98616e_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-18_296df5c558601cbb1bd9d6c99d98616e_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_296df5c558601cbb1bd9d6c99d98616e_cryptolocker
-
Size
81KB
-
MD5
296df5c558601cbb1bd9d6c99d98616e
-
SHA1
4305cb817dc1b459615d3130f3350cd22ff47a29
-
SHA256
e8ca54ffc41676c706571f4f39c0b066b44d74c4b17fae8a95aa5f8ccd0cad29
-
SHA512
2ba7d1f8b077a923fd6995dec7bf7329c9853502c64c970ce010183e8f64c5c79aa269777485fea5990337e190a4b8bac4eb4cd090bcc09b4da5c3719ad54a19
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHuX:vCjsIOtEvwDpj5H9YvQd2S
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-