General
-
Target
2024-02-24_9742cb059bedd93c08d8754fe883bcb3_cryptolocker
-
Size
82KB
-
Sample
240224-r2lk3afd7v
-
MD5
9742cb059bedd93c08d8754fe883bcb3
-
SHA1
f29ab6d5c7b24a9d868b9709973ed11f1db4d713
-
SHA256
d05e9aafd866443ab8325067a34021d2fa6254581b0311a1682467c840f23d5a
-
SHA512
f27c2d8f25655b7e5ca8abf4a22bb9cac621bde3593e472b535e32014502816081831ca811f061ab9f8457c7bb905a25d69a0f2fbd5b04b624f6f966e7afe8bb
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMAe5o:TCjsIOtEvwDpj5HE/OUHnSMQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_9742cb059bedd93c08d8754fe883bcb3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_9742cb059bedd93c08d8754fe883bcb3_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_9742cb059bedd93c08d8754fe883bcb3_cryptolocker
-
Size
82KB
-
MD5
9742cb059bedd93c08d8754fe883bcb3
-
SHA1
f29ab6d5c7b24a9d868b9709973ed11f1db4d713
-
SHA256
d05e9aafd866443ab8325067a34021d2fa6254581b0311a1682467c840f23d5a
-
SHA512
f27c2d8f25655b7e5ca8abf4a22bb9cac621bde3593e472b535e32014502816081831ca811f061ab9f8457c7bb905a25d69a0f2fbd5b04b624f6f966e7afe8bb
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMAe5o:TCjsIOtEvwDpj5HE/OUHnSMQ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-