General
-
Target
2024-03-05_bf779569099f8f3c662de8119dc2e1b1_cryptolocker
-
Size
36KB
-
Sample
240305-gql3caha38
-
MD5
bf779569099f8f3c662de8119dc2e1b1
-
SHA1
b3f4e590ba46a4fd11cc56ff9b3744127ae6557f
-
SHA256
a70a08052188cdd7a10214739928ce63e7ee4d5f145431cacf11b404d9c490e5
-
SHA512
85a1a1777a53e1223b8bb2ae3ece725d1be770b78dee064fd33e616de06eb8ba3b17b46fd00761e1c7f52092db7d983d1c4752609c40314979eebda0b832a47c
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wmkpfh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_bf779569099f8f3c662de8119dc2e1b1_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_bf779569099f8f3c662de8119dc2e1b1_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-05_bf779569099f8f3c662de8119dc2e1b1_cryptolocker
-
Size
36KB
-
MD5
bf779569099f8f3c662de8119dc2e1b1
-
SHA1
b3f4e590ba46a4fd11cc56ff9b3744127ae6557f
-
SHA256
a70a08052188cdd7a10214739928ce63e7ee4d5f145431cacf11b404d9c490e5
-
SHA512
85a1a1777a53e1223b8bb2ae3ece725d1be770b78dee064fd33e616de06eb8ba3b17b46fd00761e1c7f52092db7d983d1c4752609c40314979eebda0b832a47c
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wmkpfh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-