General
-
Target
2024-02-25_ebb03aef9da4acbd2ae9ee8403038cde_cryptolocker
-
Size
70KB
-
Sample
240225-p8qr9acb39
-
MD5
ebb03aef9da4acbd2ae9ee8403038cde
-
SHA1
0652454d765e0f5560af1e9b43e6d06a088a78cc
-
SHA256
197b9000e89f45ec6a95d17e687c0c1b688604ca240069705feb0317d9df300a
-
SHA512
bd940c8ab21515512cb51e875c67a8f3d834c13458de3e84754d38b6adcbe672bd6a5123997e00efc81f66592620c67c47425914e2ee93c9b95ea5b64b3d0f3c
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeMLam5ax+9:u6QFElP6n+gWMOtEvwDpjjaYaI
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-25_ebb03aef9da4acbd2ae9ee8403038cde_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-25_ebb03aef9da4acbd2ae9ee8403038cde_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-25_ebb03aef9da4acbd2ae9ee8403038cde_cryptolocker
-
Size
70KB
-
MD5
ebb03aef9da4acbd2ae9ee8403038cde
-
SHA1
0652454d765e0f5560af1e9b43e6d06a088a78cc
-
SHA256
197b9000e89f45ec6a95d17e687c0c1b688604ca240069705feb0317d9df300a
-
SHA512
bd940c8ab21515512cb51e875c67a8f3d834c13458de3e84754d38b6adcbe672bd6a5123997e00efc81f66592620c67c47425914e2ee93c9b95ea5b64b3d0f3c
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeMLam5ax+9:u6QFElP6n+gWMOtEvwDpjjaYaI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-