General
-
Target
2024-02-21_96455db860a89703d9ac26dc66288964_cryptolocker
-
Size
45KB
-
Sample
240221-nsh7ssfb43
-
MD5
96455db860a89703d9ac26dc66288964
-
SHA1
e9653f89bb1939641b8f178d3eb287debc6ff283
-
SHA256
c154f025c2dcce6926082b3861567f4eecf9168dcc9b22c50dac0b7291c38cd0
-
SHA512
1ed845e67796a7489fb47da40c0edb29e4c4b95ef067ebcd49396d7c8e209788b0bab04c32f34eaa5d1d435085bd1208e870da68e9a94cec255603ed48894f41
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxZ:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XY
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_96455db860a89703d9ac26dc66288964_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-21_96455db860a89703d9ac26dc66288964_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-21_96455db860a89703d9ac26dc66288964_cryptolocker
-
Size
45KB
-
MD5
96455db860a89703d9ac26dc66288964
-
SHA1
e9653f89bb1939641b8f178d3eb287debc6ff283
-
SHA256
c154f025c2dcce6926082b3861567f4eecf9168dcc9b22c50dac0b7291c38cd0
-
SHA512
1ed845e67796a7489fb47da40c0edb29e4c4b95ef067ebcd49396d7c8e209788b0bab04c32f34eaa5d1d435085bd1208e870da68e9a94cec255603ed48894f41
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxZ:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-