General
-
Target
2024-03-12_bf527c01fb9c4899769b4796a617b96d_cryptolocker
-
Size
50KB
-
Sample
240312-wal5qsfa4y
-
MD5
bf527c01fb9c4899769b4796a617b96d
-
SHA1
0ad687e402bfd91308e1bff4462704954bee6d5e
-
SHA256
e579145ad030a6ffc5ae00ed4c3528051b9562c2db076c927b570460491b0121
-
SHA512
110b9d3bea8491ca56a6bdb706cd2984eb1de757d3b5a2e39e3d2bb6a3311ae21f8d82e3acd850c6a5cac4ec611402e9e36cfab03e6370f2e0b99739eae03bdb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaT3OZ:X6QFElP6n+gJBMOtEvwDpjBtExml4
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_bf527c01fb9c4899769b4796a617b96d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_bf527c01fb9c4899769b4796a617b96d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_bf527c01fb9c4899769b4796a617b96d_cryptolocker
-
Size
50KB
-
MD5
bf527c01fb9c4899769b4796a617b96d
-
SHA1
0ad687e402bfd91308e1bff4462704954bee6d5e
-
SHA256
e579145ad030a6ffc5ae00ed4c3528051b9562c2db076c927b570460491b0121
-
SHA512
110b9d3bea8491ca56a6bdb706cd2984eb1de757d3b5a2e39e3d2bb6a3311ae21f8d82e3acd850c6a5cac4ec611402e9e36cfab03e6370f2e0b99739eae03bdb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaT3OZ:X6QFElP6n+gJBMOtEvwDpjBtExml4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-