General
-
Target
2024-02-23_2d817fe9027560ec74835d6365c59117_cryptolocker
-
Size
81KB
-
Sample
240223-tzx77aeb7v
-
MD5
2d817fe9027560ec74835d6365c59117
-
SHA1
19e933eca61da31c4b67c5faf7a80a9540159fe2
-
SHA256
7ebfaeea0f9e39d65b07778480a8f2920cc6503c02f4c39d1a023f9d2ad41645
-
SHA512
be58cc7446c95c882806de3a2e6c9c47618ac82a16704b119e88e9070c8ef320f5a132364542b0c6bdca56999141866ad014a60a712a37bacb885f59cb2c7bee
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMWa:TCjsIOtEvwDpj5HE/OUHnSMN
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_2d817fe9027560ec74835d6365c59117_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_2d817fe9027560ec74835d6365c59117_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_2d817fe9027560ec74835d6365c59117_cryptolocker
-
Size
81KB
-
MD5
2d817fe9027560ec74835d6365c59117
-
SHA1
19e933eca61da31c4b67c5faf7a80a9540159fe2
-
SHA256
7ebfaeea0f9e39d65b07778480a8f2920cc6503c02f4c39d1a023f9d2ad41645
-
SHA512
be58cc7446c95c882806de3a2e6c9c47618ac82a16704b119e88e9070c8ef320f5a132364542b0c6bdca56999141866ad014a60a712a37bacb885f59cb2c7bee
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMWa:TCjsIOtEvwDpj5HE/OUHnSMN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-