General
-
Target
2024-03-08_21b06f7409d8d7074192f2dafd59ffb4_cryptolocker
-
Size
43KB
-
Sample
240308-f8madsgc56
-
MD5
21b06f7409d8d7074192f2dafd59ffb4
-
SHA1
c9849442c873fcd4663b0af36993f89815671117
-
SHA256
bb283fac723ac0e8d9262ab0709baa8d5328590f7d4b053ca8f573b600198e71
-
SHA512
96ee69794dd249cc0d918f88200706ce4f6ea11a7399b20085525f4d0c9bc5ffc52b501e2bf88ff06492ad95bb6a99a244c9c7125eacd6319a0ac5a87aa8d34c
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+MK:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+L
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_21b06f7409d8d7074192f2dafd59ffb4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_21b06f7409d8d7074192f2dafd59ffb4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_21b06f7409d8d7074192f2dafd59ffb4_cryptolocker
-
Size
43KB
-
MD5
21b06f7409d8d7074192f2dafd59ffb4
-
SHA1
c9849442c873fcd4663b0af36993f89815671117
-
SHA256
bb283fac723ac0e8d9262ab0709baa8d5328590f7d4b053ca8f573b600198e71
-
SHA512
96ee69794dd249cc0d918f88200706ce4f6ea11a7399b20085525f4d0c9bc5ffc52b501e2bf88ff06492ad95bb6a99a244c9c7125eacd6319a0ac5a87aa8d34c
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+MK:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+L
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-