General
-
Target
2024-03-12_071e9b22a3d39949cb3654dd055035c5_cryptolocker
-
Size
124KB
-
Sample
240312-f39hqshd9t
-
MD5
071e9b22a3d39949cb3654dd055035c5
-
SHA1
e9dd0dbfbbb3d123bbfca0db6e4bf632f8e9927a
-
SHA256
823ac1fb27fccab3da902fcef4db64638e332ad858b8149a3c22fe54bbe5aca0
-
SHA512
da35e097881055868a02eb7fa1230645dab04dac05010087fecafd1ca31dbb4485f09c0622e121d448e3ce8750f4165d8e94b034c0026f46ef1a89379b2442fd
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgdln:u6a++OtEvwDpj6zT
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_071e9b22a3d39949cb3654dd055035c5_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-12_071e9b22a3d39949cb3654dd055035c5_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_071e9b22a3d39949cb3654dd055035c5_cryptolocker
-
Size
124KB
-
MD5
071e9b22a3d39949cb3654dd055035c5
-
SHA1
e9dd0dbfbbb3d123bbfca0db6e4bf632f8e9927a
-
SHA256
823ac1fb27fccab3da902fcef4db64638e332ad858b8149a3c22fe54bbe5aca0
-
SHA512
da35e097881055868a02eb7fa1230645dab04dac05010087fecafd1ca31dbb4485f09c0622e121d448e3ce8750f4165d8e94b034c0026f46ef1a89379b2442fd
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgdln:u6a++OtEvwDpj6zT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-