General
-
Target
2024-02-19_b876c5ef3d138b4ef8c9b2f8b9b0bef7_cryptolocker
-
Size
71KB
-
Sample
240219-jyjcjaba9w
-
MD5
b876c5ef3d138b4ef8c9b2f8b9b0bef7
-
SHA1
7dc3fec8a924bec4c609641470a8a765cd081c75
-
SHA256
2e49310e051f7581ae841f210f74cd50ccc805323da1bdcc61757c292454ed11
-
SHA512
c0dfd100c049ca68ec555e7fb2947df84d21386f2603410b8c296f6c7bc0810ea19f08c9a8f948080c49aad0b92299c2c3d8ab78164b5e8cc68856393f2df970
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsm:X6a+SOtEvwDpjBZYvQd21
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_b876c5ef3d138b4ef8c9b2f8b9b0bef7_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-19_b876c5ef3d138b4ef8c9b2f8b9b0bef7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_b876c5ef3d138b4ef8c9b2f8b9b0bef7_cryptolocker
-
Size
71KB
-
MD5
b876c5ef3d138b4ef8c9b2f8b9b0bef7
-
SHA1
7dc3fec8a924bec4c609641470a8a765cd081c75
-
SHA256
2e49310e051f7581ae841f210f74cd50ccc805323da1bdcc61757c292454ed11
-
SHA512
c0dfd100c049ca68ec555e7fb2947df84d21386f2603410b8c296f6c7bc0810ea19f08c9a8f948080c49aad0b92299c2c3d8ab78164b5e8cc68856393f2df970
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsm:X6a+SOtEvwDpjBZYvQd21
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-