General
-
Target
2024-03-13_55bf61b811e609119117c02367263cf3_cryptolocker
-
Size
50KB
-
Sample
240313-2dh55sdb28
-
MD5
55bf61b811e609119117c02367263cf3
-
SHA1
eb7edafd2aee92ca4a61b9880e770ce117374355
-
SHA256
733fbc856fb7b1463c792ac81d7ebc7b690757a7b0a6be7a6436b4a4ac13a39b
-
SHA512
587fb6d1c8dbaddbe79c6378283bf430ecd3a9a1977bc3be1a58e29173c287f3627159fdc2ed96fcf403a58d15ebfcaa349805932c110d1a609c4837320702c8
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHYhm3:79mqyNhQMOtEvwDpjBxe8Gp
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_55bf61b811e609119117c02367263cf3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_55bf61b811e609119117c02367263cf3_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_55bf61b811e609119117c02367263cf3_cryptolocker
-
Size
50KB
-
MD5
55bf61b811e609119117c02367263cf3
-
SHA1
eb7edafd2aee92ca4a61b9880e770ce117374355
-
SHA256
733fbc856fb7b1463c792ac81d7ebc7b690757a7b0a6be7a6436b4a4ac13a39b
-
SHA512
587fb6d1c8dbaddbe79c6378283bf430ecd3a9a1977bc3be1a58e29173c287f3627159fdc2ed96fcf403a58d15ebfcaa349805932c110d1a609c4837320702c8
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHYhm3:79mqyNhQMOtEvwDpjBxe8Gp
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-