General
-
Target
2024-03-05_3595d448257ec197902f647d42e8375d_cryptolocker
-
Size
101KB
-
Sample
240305-3fjp5ade46
-
MD5
3595d448257ec197902f647d42e8375d
-
SHA1
06ee5756f7562cdc6f7be510d82ea1829e3362de
-
SHA256
55fb56dbd9e3d370a3938f7defafa5b657daac4684db424e15611adcce3c9b79
-
SHA512
0a78232e205aca69c4dcc44b96ec7548d767a1843eab08aad4964a70d02863ec70c175ddbea45a24c2962e984a6652c9fe5b30d374d4041639a2741986eadc82
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPAO:V6a+pOtEvwDpjtzf
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_3595d448257ec197902f647d42e8375d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_3595d448257ec197902f647d42e8375d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-05_3595d448257ec197902f647d42e8375d_cryptolocker
-
Size
101KB
-
MD5
3595d448257ec197902f647d42e8375d
-
SHA1
06ee5756f7562cdc6f7be510d82ea1829e3362de
-
SHA256
55fb56dbd9e3d370a3938f7defafa5b657daac4684db424e15611adcce3c9b79
-
SHA512
0a78232e205aca69c4dcc44b96ec7548d767a1843eab08aad4964a70d02863ec70c175ddbea45a24c2962e984a6652c9fe5b30d374d4041639a2741986eadc82
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPAO:V6a+pOtEvwDpjtzf
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-