General
-
Target
2024-02-23_92e9443b1d311965743837404375ee98_cryptolocker
-
Size
48KB
-
Sample
240223-q5h4nsae94
-
MD5
92e9443b1d311965743837404375ee98
-
SHA1
d4f3127ece74a3a8ac3810a3a03777b961bb39f0
-
SHA256
061cd5b6dc1cbd6816d81d6192fd9e8357329e2d5ed3a0996f16f602495f8de3
-
SHA512
39979f495c53d7f3d2fbb14c9c468493cb0a2c59a1f5068a3439d60bad34cf1ae7aa4b248b439597994f4a21a71e474a2c266a250a481fa92a9ba6401fb248a3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTEb:79mqyNhQMOtEvwDpjBxe81b
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_92e9443b1d311965743837404375ee98_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-23_92e9443b1d311965743837404375ee98_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_92e9443b1d311965743837404375ee98_cryptolocker
-
Size
48KB
-
MD5
92e9443b1d311965743837404375ee98
-
SHA1
d4f3127ece74a3a8ac3810a3a03777b961bb39f0
-
SHA256
061cd5b6dc1cbd6816d81d6192fd9e8357329e2d5ed3a0996f16f602495f8de3
-
SHA512
39979f495c53d7f3d2fbb14c9c468493cb0a2c59a1f5068a3439d60bad34cf1ae7aa4b248b439597994f4a21a71e474a2c266a250a481fa92a9ba6401fb248a3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTEb:79mqyNhQMOtEvwDpjBxe81b
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-