General
-
Target
2024-03-12_8d4267a88372ef033225b2d63d6e7def_cryptolocker
-
Size
49KB
-
Sample
240312-ja3q9sde49
-
MD5
8d4267a88372ef033225b2d63d6e7def
-
SHA1
96a0a26a784c3b45710cc1e10b4249dcd72bfbda
-
SHA256
49ffcb061b3e463e11581696a81caa192263827598373ae51dbdf82e2a060900
-
SHA512
590a21930b984cbeb5798462a6c41e971fcd7b2920dbb3cdcedd7d0f0f15018d84ba18bdc986c276fbfc4a4970434ec40c88ebff727bd17b105f82a3affaaac6
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZd:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLT
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_8d4267a88372ef033225b2d63d6e7def_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-12_8d4267a88372ef033225b2d63d6e7def_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_8d4267a88372ef033225b2d63d6e7def_cryptolocker
-
Size
49KB
-
MD5
8d4267a88372ef033225b2d63d6e7def
-
SHA1
96a0a26a784c3b45710cc1e10b4249dcd72bfbda
-
SHA256
49ffcb061b3e463e11581696a81caa192263827598373ae51dbdf82e2a060900
-
SHA512
590a21930b984cbeb5798462a6c41e971fcd7b2920dbb3cdcedd7d0f0f15018d84ba18bdc986c276fbfc4a4970434ec40c88ebff727bd17b105f82a3affaaac6
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZd:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-