General
-
Target
2024-03-10_18951a1eb038503d606630df2b47e3cc_cryptolocker
-
Size
128KB
-
Sample
240310-dzhvhabf7t
-
MD5
18951a1eb038503d606630df2b47e3cc
-
SHA1
5ed3734368c7267c11d4e466a34461fbf00bf134
-
SHA256
ebbe994d7eac50c5b83de86cf697acb975115dc746c7404c3cc3fb65aff63915
-
SHA512
ddd1aea09d004cd4e532a85498dddf3300a47d507637ad88051d4a39790cb3f62cbe8bedb1985d2f0eade8783834f5161be77dc48cb9e5b9dab205f8d605cec1
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpWb:vCA9OtEvwDpjG
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_18951a1eb038503d606630df2b47e3cc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_18951a1eb038503d606630df2b47e3cc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_18951a1eb038503d606630df2b47e3cc_cryptolocker
-
Size
128KB
-
MD5
18951a1eb038503d606630df2b47e3cc
-
SHA1
5ed3734368c7267c11d4e466a34461fbf00bf134
-
SHA256
ebbe994d7eac50c5b83de86cf697acb975115dc746c7404c3cc3fb65aff63915
-
SHA512
ddd1aea09d004cd4e532a85498dddf3300a47d507637ad88051d4a39790cb3f62cbe8bedb1985d2f0eade8783834f5161be77dc48cb9e5b9dab205f8d605cec1
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpWb:vCA9OtEvwDpjG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-