General
-
Target
2024-03-08_f44eb0b7531a7de414240ee34b14e372_cryptolocker
-
Size
62KB
-
Sample
240308-g76s3sac7x
-
MD5
f44eb0b7531a7de414240ee34b14e372
-
SHA1
8617a257dd79bbd91f48c2151083215fc0775153
-
SHA256
3c6c97f0d60a3eb21ce0a57122e97c179f7b46afe15c3902021b3c8ba90354d5
-
SHA512
535856464d86e9b89a67b7656d0938879209f6356a1942c21ef998efa3f54dddb685cc59eb0f1a6b47dfc82b5d6e73313eb8bb3a5c9c05c24dd5757b7796e044
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293u:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_f44eb0b7531a7de414240ee34b14e372_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_f44eb0b7531a7de414240ee34b14e372_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_f44eb0b7531a7de414240ee34b14e372_cryptolocker
-
Size
62KB
-
MD5
f44eb0b7531a7de414240ee34b14e372
-
SHA1
8617a257dd79bbd91f48c2151083215fc0775153
-
SHA256
3c6c97f0d60a3eb21ce0a57122e97c179f7b46afe15c3902021b3c8ba90354d5
-
SHA512
535856464d86e9b89a67b7656d0938879209f6356a1942c21ef998efa3f54dddb685cc59eb0f1a6b47dfc82b5d6e73313eb8bb3a5c9c05c24dd5757b7796e044
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293u:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-