General
-
Target
2024-02-20_792a5b0e732b178caa5b4a71e472726a_cryptolocker
-
Size
69KB
-
Sample
240220-nq1n3afe6y
-
MD5
792a5b0e732b178caa5b4a71e472726a
-
SHA1
d92518f2a52eaf1d1a8ee06c57e4aea57a16d0a2
-
SHA256
6dcb82da8533ed7d186d3973afea7742daab767690c97a0e20169dec92eddd34
-
SHA512
5a1b8e2e8a096ee9d61f74f6750d6e9f5664c61bbb93ba773f0cedb07adbe7ff4d1d1fd2c75bbe66a6256f712e0b0e613d1e0165032cb844a5523109e0ab8820
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUs9:DW60sllyWOtEvwDpjwF85A
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_792a5b0e732b178caa5b4a71e472726a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_792a5b0e732b178caa5b4a71e472726a_cryptolocker.exe
Resource
win10v2004-20240220-en
Malware Config
Targets
-
-
Target
2024-02-20_792a5b0e732b178caa5b4a71e472726a_cryptolocker
-
Size
69KB
-
MD5
792a5b0e732b178caa5b4a71e472726a
-
SHA1
d92518f2a52eaf1d1a8ee06c57e4aea57a16d0a2
-
SHA256
6dcb82da8533ed7d186d3973afea7742daab767690c97a0e20169dec92eddd34
-
SHA512
5a1b8e2e8a096ee9d61f74f6750d6e9f5664c61bbb93ba773f0cedb07adbe7ff4d1d1fd2c75bbe66a6256f712e0b0e613d1e0165032cb844a5523109e0ab8820
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUs9:DW60sllyWOtEvwDpjwF85A
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-