General
-
Target
2024-02-20_5ad232ed38970f40032e835980a99210_cryptolocker
-
Size
45KB
-
Sample
240220-nn5v1afe5v
-
MD5
5ad232ed38970f40032e835980a99210
-
SHA1
c3d8c2f6acc380070302c565b6bed7f6ddbfff08
-
SHA256
8fdb6ccafc3134a3b16a3cb294f8095c233385f67705a0f036993cf5498fa72f
-
SHA512
566c938159fce5012f76b332c6e2099d08fe2db43ac9681bf1f25af219dc72348edcb605c4950f3e5281854d55e3232c60ce70a7879e34d4c0bca587f3b0bee2
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxD:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_5ad232ed38970f40032e835980a99210_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-20_5ad232ed38970f40032e835980a99210_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_5ad232ed38970f40032e835980a99210_cryptolocker
-
Size
45KB
-
MD5
5ad232ed38970f40032e835980a99210
-
SHA1
c3d8c2f6acc380070302c565b6bed7f6ddbfff08
-
SHA256
8fdb6ccafc3134a3b16a3cb294f8095c233385f67705a0f036993cf5498fa72f
-
SHA512
566c938159fce5012f76b332c6e2099d08fe2db43ac9681bf1f25af219dc72348edcb605c4950f3e5281854d55e3232c60ce70a7879e34d4c0bca587f3b0bee2
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxD:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-