General
-
Target
2024-02-23_6e26522df025e3ceda61a22267498249_cryptolocker
-
Size
77KB
-
Sample
240223-mvs94seh8w
-
MD5
6e26522df025e3ceda61a22267498249
-
SHA1
6ae4d325f48982ca0ba6e29d08ec02d9f82637d0
-
SHA256
dee4802001de1f10f096730bafc59c4c969d2a4b7b9cfe7f2be24c230ae34ef8
-
SHA512
e08aa17ec3007e3a647447132aa733a461c6ef7c76cec678e700f87ca1fe41720a6c27698bcdf94209089ff84726d67a7949cec96e283c3c6792207242ef20cf
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTX:ZVxkGOtEvwDpjcaxy
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_6e26522df025e3ceda61a22267498249_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_6e26522df025e3ceda61a22267498249_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_6e26522df025e3ceda61a22267498249_cryptolocker
-
Size
77KB
-
MD5
6e26522df025e3ceda61a22267498249
-
SHA1
6ae4d325f48982ca0ba6e29d08ec02d9f82637d0
-
SHA256
dee4802001de1f10f096730bafc59c4c969d2a4b7b9cfe7f2be24c230ae34ef8
-
SHA512
e08aa17ec3007e3a647447132aa733a461c6ef7c76cec678e700f87ca1fe41720a6c27698bcdf94209089ff84726d67a7949cec96e283c3c6792207242ef20cf
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KEWTX:ZVxkGOtEvwDpjcaxy
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-