General
-
Target
2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker
-
Size
65KB
-
Sample
240228-nvhztaaf96
-
MD5
b0163f26742b14984f75f550d92884dd
-
SHA1
f723d8e2a84c6a48dbb7716630a6d06d066f2dbe
-
SHA256
3c3d4029a5aeb5331eba2725a7244dda5b52f3e8ccc393eb1cad0632cff3dddf
-
SHA512
1dd428c7f09e0460639cb8847ebe339d0ec788cb07413c512a882c57ee79636fb3bd4157ccb6cd432d1d2d3e8e1d4756f6eb9e127bf2823d3f0bcc46f662d2a1
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA98:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_b0163f26742b14984f75f550d92884dd_cryptolocker
-
Size
65KB
-
MD5
b0163f26742b14984f75f550d92884dd
-
SHA1
f723d8e2a84c6a48dbb7716630a6d06d066f2dbe
-
SHA256
3c3d4029a5aeb5331eba2725a7244dda5b52f3e8ccc393eb1cad0632cff3dddf
-
SHA512
1dd428c7f09e0460639cb8847ebe339d0ec788cb07413c512a882c57ee79636fb3bd4157ccb6cd432d1d2d3e8e1d4756f6eb9e127bf2823d3f0bcc46f662d2a1
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA98:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7O
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-