General
-
Target
2024-03-08_98701ae56352030d872663448eaa3ffb_cryptolocker
-
Size
72KB
-
Sample
240308-gsqhjsgh64
-
MD5
98701ae56352030d872663448eaa3ffb
-
SHA1
f29041e99d381aa515e5f7a779f1fbb300905a11
-
SHA256
4c01610517069611f2f2f6e75cdde4fe2e4471b330f7716b560285c75246d50a
-
SHA512
d2bbf592986a4921b641b07a0042537797300e027560389761c9251b06daf72dd3d3b857dcad1c535da6676e83409d9b0a299ca66fe9d41c07a0ce389e5cb294
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsQ:X6a+SOtEvwDpjBZYvQd2P
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-08_98701ae56352030d872663448eaa3ffb_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-08_98701ae56352030d872663448eaa3ffb_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-08_98701ae56352030d872663448eaa3ffb_cryptolocker
-
Size
72KB
-
MD5
98701ae56352030d872663448eaa3ffb
-
SHA1
f29041e99d381aa515e5f7a779f1fbb300905a11
-
SHA256
4c01610517069611f2f2f6e75cdde4fe2e4471b330f7716b560285c75246d50a
-
SHA512
d2bbf592986a4921b641b07a0042537797300e027560389761c9251b06daf72dd3d3b857dcad1c535da6676e83409d9b0a299ca66fe9d41c07a0ce389e5cb294
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsQ:X6a+SOtEvwDpjBZYvQd2P
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-