General
-
Target
2024-02-28_29ba6f0811c8c05b54635981b10b1c00_cryptolocker
-
Size
50KB
-
Sample
240228-e763qsbc58
-
MD5
29ba6f0811c8c05b54635981b10b1c00
-
SHA1
eaae9b869266d19e711a3ea65e1ca1d94e629e87
-
SHA256
f008938864ee2d9e47a8f11f768ad9f683d6b7e41723e36defec9e344c7923d1
-
SHA512
ca522c9f4e5d60cc612a35cc41123ce43ed9bc664be7e86eed54595341923078362f63a20d284b91beccb7c95c487be8f97dea7409dc8f7ee9ffd2314fd74ecc
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcOUNA4:X6QFElP6n+gJBMOtEvwDpjBtExmliW4
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_29ba6f0811c8c05b54635981b10b1c00_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_29ba6f0811c8c05b54635981b10b1c00_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_29ba6f0811c8c05b54635981b10b1c00_cryptolocker
-
Size
50KB
-
MD5
29ba6f0811c8c05b54635981b10b1c00
-
SHA1
eaae9b869266d19e711a3ea65e1ca1d94e629e87
-
SHA256
f008938864ee2d9e47a8f11f768ad9f683d6b7e41723e36defec9e344c7923d1
-
SHA512
ca522c9f4e5d60cc612a35cc41123ce43ed9bc664be7e86eed54595341923078362f63a20d284b91beccb7c95c487be8f97dea7409dc8f7ee9ffd2314fd74ecc
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcOUNA4:X6QFElP6n+gJBMOtEvwDpjBtExmliW4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-