General
-
Target
2024-02-23_ff8d2511f4824bcfdf3cf97993ae371b_cryptolocker
-
Size
38KB
-
Sample
240223-y16m6sgd27
-
MD5
ff8d2511f4824bcfdf3cf97993ae371b
-
SHA1
afc121644d3e7f648c49633605de22622a29cab3
-
SHA256
589e2935db35303d02a2c628b1c9c0d5257feae311682625ba2de42892b7be0b
-
SHA512
df1fe72b1d73ff82aaed9fbd041ecd9c05d1df7e47876c114a3638874a8b7dbece9d336121d04afc8b63af0f2c1e78a473db93a9296c449a4f3192e8cbefa8eb
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axe:V6QFElP6n+gMQMOtEvwDpjyaYaE
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_ff8d2511f4824bcfdf3cf97993ae371b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_ff8d2511f4824bcfdf3cf97993ae371b_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_ff8d2511f4824bcfdf3cf97993ae371b_cryptolocker
-
Size
38KB
-
MD5
ff8d2511f4824bcfdf3cf97993ae371b
-
SHA1
afc121644d3e7f648c49633605de22622a29cab3
-
SHA256
589e2935db35303d02a2c628b1c9c0d5257feae311682625ba2de42892b7be0b
-
SHA512
df1fe72b1d73ff82aaed9fbd041ecd9c05d1df7e47876c114a3638874a8b7dbece9d336121d04afc8b63af0f2c1e78a473db93a9296c449a4f3192e8cbefa8eb
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axe:V6QFElP6n+gMQMOtEvwDpjyaYaE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-