General
-
Target
2024-03-07_afb646a15546876efaf8aeee1f89952c_cryptolocker
-
Size
43KB
-
Sample
240307-3mjnpsac61
-
MD5
afb646a15546876efaf8aeee1f89952c
-
SHA1
3b8b70f84dac037a4f56d73e667e652f4683c79d
-
SHA256
30b1214b0e8a8f348a2c3703acc2666366424c55937d49cf1d826fe1f4d7d2c9
-
SHA512
944e59e98754c59a581d2f47fe63cea6876cb22f9a84a508ccb72e5c86b0204b40f66e35de6e54a1a6ebaf3e73361ab3f2e3250ac38889b65d297c9d53b98ef3
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx3:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X6
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_afb646a15546876efaf8aeee1f89952c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_afb646a15546876efaf8aeee1f89952c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_afb646a15546876efaf8aeee1f89952c_cryptolocker
-
Size
43KB
-
MD5
afb646a15546876efaf8aeee1f89952c
-
SHA1
3b8b70f84dac037a4f56d73e667e652f4683c79d
-
SHA256
30b1214b0e8a8f348a2c3703acc2666366424c55937d49cf1d826fe1f4d7d2c9
-
SHA512
944e59e98754c59a581d2f47fe63cea6876cb22f9a84a508ccb72e5c86b0204b40f66e35de6e54a1a6ebaf3e73361ab3f2e3250ac38889b65d297c9d53b98ef3
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx3:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X6
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-