General
-
Target
2024-03-06_b7a1a3c34f80e98e954345a64c522455_cryptolocker
-
Size
36KB
-
Sample
240306-egynnsae4x
-
MD5
b7a1a3c34f80e98e954345a64c522455
-
SHA1
88694c561ae56cae2c60d396fe5526541cb5c6d6
-
SHA256
0f8261eb7d9e8f4f3899bfb3d1fb6cb390a8ef488d6bb4c8ea794f918656886d
-
SHA512
b546d40e407b0b824c7e0dcb2d9926f0207cccc8df4a700a30f148eec3b71a07b17c001624ed575afbc6cd79cfa9e37dcf11c863c02518a153e5c92c00d84949
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYf:vj+jsMQMOtEvwDpj5HcSYf
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_b7a1a3c34f80e98e954345a64c522455_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_b7a1a3c34f80e98e954345a64c522455_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_b7a1a3c34f80e98e954345a64c522455_cryptolocker
-
Size
36KB
-
MD5
b7a1a3c34f80e98e954345a64c522455
-
SHA1
88694c561ae56cae2c60d396fe5526541cb5c6d6
-
SHA256
0f8261eb7d9e8f4f3899bfb3d1fb6cb390a8ef488d6bb4c8ea794f918656886d
-
SHA512
b546d40e407b0b824c7e0dcb2d9926f0207cccc8df4a700a30f148eec3b71a07b17c001624ed575afbc6cd79cfa9e37dcf11c863c02518a153e5c92c00d84949
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYf:vj+jsMQMOtEvwDpj5HcSYf
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-