General
-
Target
2024-03-10_3161e23a1c465e12253f55145779f03e_cryptolocker
-
Size
59KB
-
Sample
240310-mjb7fsae43
-
MD5
3161e23a1c465e12253f55145779f03e
-
SHA1
ea2be9133b7809a687731716e0f775f2cf21cf97
-
SHA256
1557541d54a9cf5ced3f1b8feb554e8f5c75adf2e9e5dd5542ffc35486735aed
-
SHA512
3faa8fc872fc9fac10264fe2d7d798c74f5394778944859b45eef33fc28d695111b40cc1ad8a85fd28d4449bd8e8f0b360e00bd18ca8254112fa5b5f34b324d1
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMB:TCjsIOtEvwDpj5HE/OUHnSMC
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_3161e23a1c465e12253f55145779f03e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_3161e23a1c465e12253f55145779f03e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_3161e23a1c465e12253f55145779f03e_cryptolocker
-
Size
59KB
-
MD5
3161e23a1c465e12253f55145779f03e
-
SHA1
ea2be9133b7809a687731716e0f775f2cf21cf97
-
SHA256
1557541d54a9cf5ced3f1b8feb554e8f5c75adf2e9e5dd5542ffc35486735aed
-
SHA512
3faa8fc872fc9fac10264fe2d7d798c74f5394778944859b45eef33fc28d695111b40cc1ad8a85fd28d4449bd8e8f0b360e00bd18ca8254112fa5b5f34b324d1
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMB:TCjsIOtEvwDpj5HE/OUHnSMC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-