General
-
Target
2024-03-09_d01fc270532f43cfd97bae7c230558df_cryptolocker
-
Size
45KB
-
Sample
240309-a4g7zsag83
-
MD5
d01fc270532f43cfd97bae7c230558df
-
SHA1
5f6a35b476585c0f73a9826bacec86473c711005
-
SHA256
4b70e7841bcb1e06172dc70b8b574ff04091247e09a1f04f87290457cd904630
-
SHA512
169ace5fdb92204a83fc119dff3f4f65adb1eddbcf87c3d7255c0d01a2f8384a076d4553ad8826e04fe72e1a650739cac27f5bb1f9a54cf634ab172a2a37e94b
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuf:vj+jsMQMOtEvwDpj5Hczer5ixuf
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_d01fc270532f43cfd97bae7c230558df_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_d01fc270532f43cfd97bae7c230558df_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_d01fc270532f43cfd97bae7c230558df_cryptolocker
-
Size
45KB
-
MD5
d01fc270532f43cfd97bae7c230558df
-
SHA1
5f6a35b476585c0f73a9826bacec86473c711005
-
SHA256
4b70e7841bcb1e06172dc70b8b574ff04091247e09a1f04f87290457cd904630
-
SHA512
169ace5fdb92204a83fc119dff3f4f65adb1eddbcf87c3d7255c0d01a2f8384a076d4553ad8826e04fe72e1a650739cac27f5bb1f9a54cf634ab172a2a37e94b
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuf:vj+jsMQMOtEvwDpj5Hczer5ixuf
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-