General
-
Target
2024-03-06_ffffef086ca3963100c82add4a0d1f65_cryptolocker
-
Size
47KB
-
Sample
240306-hnxxhaeh53
-
MD5
ffffef086ca3963100c82add4a0d1f65
-
SHA1
041be8e3f3962fa1c9f0907fa4b5729d7365dbca
-
SHA256
037c931944896acda035e2392520d58f029c467747bb8ee3b3c2f4bc40707f25
-
SHA512
7781b296847c348290e6109891e9438974e3f5974df45584df96f86d720a7ee3843766febfb4931dcb1cd4205310504c23d2b1e757a49a61854a98963151cbfb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlH:X6QFElP6n+gJQMOtEvwDpjB0GIWSlH
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_ffffef086ca3963100c82add4a0d1f65_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-06_ffffef086ca3963100c82add4a0d1f65_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_ffffef086ca3963100c82add4a0d1f65_cryptolocker
-
Size
47KB
-
MD5
ffffef086ca3963100c82add4a0d1f65
-
SHA1
041be8e3f3962fa1c9f0907fa4b5729d7365dbca
-
SHA256
037c931944896acda035e2392520d58f029c467747bb8ee3b3c2f4bc40707f25
-
SHA512
7781b296847c348290e6109891e9438974e3f5974df45584df96f86d720a7ee3843766febfb4931dcb1cd4205310504c23d2b1e757a49a61854a98963151cbfb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlH:X6QFElP6n+gJQMOtEvwDpjB0GIWSlH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-