General
-
Target
2024-02-21_b8bc225c89be73841012382e3b5effde_cryptolocker
-
Size
73KB
-
Sample
240221-veq4taca69
-
MD5
b8bc225c89be73841012382e3b5effde
-
SHA1
2900d4be1cacf057ccdc30c570deed16619d81e4
-
SHA256
98e5961bdcc29753d67eb7f69a1b6de56b78de0025a2152e7d2baab177fc3d6f
-
SHA512
5e004523a95946719a59f9db41234b645da9d303e2b8b30d02bc0c428c46d2aa05652d98c7af10263a7405b4166c7e0886d048059b17434f3ee634e65420e780
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sK:X6a+SOtEvwDpjBZYvQd29
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_b8bc225c89be73841012382e3b5effde_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_b8bc225c89be73841012382e3b5effde_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_b8bc225c89be73841012382e3b5effde_cryptolocker
-
Size
73KB
-
MD5
b8bc225c89be73841012382e3b5effde
-
SHA1
2900d4be1cacf057ccdc30c570deed16619d81e4
-
SHA256
98e5961bdcc29753d67eb7f69a1b6de56b78de0025a2152e7d2baab177fc3d6f
-
SHA512
5e004523a95946719a59f9db41234b645da9d303e2b8b30d02bc0c428c46d2aa05652d98c7af10263a7405b4166c7e0886d048059b17434f3ee634e65420e780
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sK:X6a+SOtEvwDpjBZYvQd29
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-