General
-
Target
2024-02-19_a1465aaec92738f4c35a4ab4ee28fe6f_cryptolocker
-
Size
62KB
-
Sample
240219-2qq2hseh7s
-
MD5
a1465aaec92738f4c35a4ab4ee28fe6f
-
SHA1
9a1c6f238b6f82d73ed92cc1b11ebfb743000599
-
SHA256
9bce5390c783e44d9f03887f1e7ee2884fdbe8fa0dc5a6b85c5183c5f2db5556
-
SHA512
62d8c94d7f1768c00583d68c22615167302e679c2ea5518c2b98004ca69b7c95a1ee156297c79bea21121b9754b9cab8fc050ff1774c4bb5dcd63302cb8ec85d
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdB:TCjsIOtEvwDpj5HE/OUHnSMYg
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_a1465aaec92738f4c35a4ab4ee28fe6f_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_a1465aaec92738f4c35a4ab4ee28fe6f_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_a1465aaec92738f4c35a4ab4ee28fe6f_cryptolocker
-
Size
62KB
-
MD5
a1465aaec92738f4c35a4ab4ee28fe6f
-
SHA1
9a1c6f238b6f82d73ed92cc1b11ebfb743000599
-
SHA256
9bce5390c783e44d9f03887f1e7ee2884fdbe8fa0dc5a6b85c5183c5f2db5556
-
SHA512
62d8c94d7f1768c00583d68c22615167302e679c2ea5518c2b98004ca69b7c95a1ee156297c79bea21121b9754b9cab8fc050ff1774c4bb5dcd63302cb8ec85d
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvdB:TCjsIOtEvwDpj5HE/OUHnSMYg
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-