General
-
Target
2024-03-12_59ec550a115d6430097d1e227ebe8d97_cryptolocker
-
Size
89KB
-
Sample
240312-g873jaae9y
-
MD5
59ec550a115d6430097d1e227ebe8d97
-
SHA1
d6d799e492962eb783b0958917345fa235a75e39
-
SHA256
6853850a68106958b35ac40c8b7bfbc51e7692df40f1e6298c07b91c443c47a4
-
SHA512
ad2650b630ae2136b3d74529525f9d1826b2e55efbca4707864b76d45ac7a2395a9ef52553b76186e166a1bb1829ae3fc1c9fae3bd450fcbc7557abcc2e74b7f
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQYzTH:vCjsIOtEvwDpj5H8zPs6
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_59ec550a115d6430097d1e227ebe8d97_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_59ec550a115d6430097d1e227ebe8d97_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_59ec550a115d6430097d1e227ebe8d97_cryptolocker
-
Size
89KB
-
MD5
59ec550a115d6430097d1e227ebe8d97
-
SHA1
d6d799e492962eb783b0958917345fa235a75e39
-
SHA256
6853850a68106958b35ac40c8b7bfbc51e7692df40f1e6298c07b91c443c47a4
-
SHA512
ad2650b630ae2136b3d74529525f9d1826b2e55efbca4707864b76d45ac7a2395a9ef52553b76186e166a1bb1829ae3fc1c9fae3bd450fcbc7557abcc2e74b7f
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQYzTH:vCjsIOtEvwDpj5H8zPs6
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-