General
-
Target
2024-02-23_1965cd5f105a4607a87fdbb63073e3f7_cryptolocker
-
Size
61KB
-
Sample
240223-x7m9qsgd7s
-
MD5
1965cd5f105a4607a87fdbb63073e3f7
-
SHA1
2375552e6c78b90fda092c08d5bd2fe5dc35a71b
-
SHA256
f417a81402a0d9bd2b999ee40d5bfc834fbaf046fdf3ab0a71323a8a860136dd
-
SHA512
aa488715317d3d4545b22c8d31103e5f5f4b692c032edb28cb76597eedaf2c24a03dd401f5dc7f4e8f37024153ff5c703e23d589b753762d979baf20523ef519
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xEm:X6a+SOtEvwDpjBrOn
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_1965cd5f105a4607a87fdbb63073e3f7_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-23_1965cd5f105a4607a87fdbb63073e3f7_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_1965cd5f105a4607a87fdbb63073e3f7_cryptolocker
-
Size
61KB
-
MD5
1965cd5f105a4607a87fdbb63073e3f7
-
SHA1
2375552e6c78b90fda092c08d5bd2fe5dc35a71b
-
SHA256
f417a81402a0d9bd2b999ee40d5bfc834fbaf046fdf3ab0a71323a8a860136dd
-
SHA512
aa488715317d3d4545b22c8d31103e5f5f4b692c032edb28cb76597eedaf2c24a03dd401f5dc7f4e8f37024153ff5c703e23d589b753762d979baf20523ef519
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xEm:X6a+SOtEvwDpjBrOn
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-