General
-
Target
2024-03-13_601b015dd7a13202f5725a839f726465_cryptolocker
-
Size
38KB
-
Sample
240313-fa359aeg43
-
MD5
601b015dd7a13202f5725a839f726465
-
SHA1
694bc6ad6b6768d663f6059e678bc83a6da46d1c
-
SHA256
3f0d0e211596e569a632f2438d861e75e380e08e599dcb13d1e4c0b4c234f951
-
SHA512
4b4c1d11706e456e504930414607458dfa459ea4afe0519d1513120b34127bd4b8a7be69788772865eb937a81c76ca6038864ccfdc6824afa9db558b09bcda8a
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4e:X6QFElP6n+gJQMOtEvwDpjBmzDUp4e
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_601b015dd7a13202f5725a839f726465_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_601b015dd7a13202f5725a839f726465_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-13_601b015dd7a13202f5725a839f726465_cryptolocker
-
Size
38KB
-
MD5
601b015dd7a13202f5725a839f726465
-
SHA1
694bc6ad6b6768d663f6059e678bc83a6da46d1c
-
SHA256
3f0d0e211596e569a632f2438d861e75e380e08e599dcb13d1e4c0b4c234f951
-
SHA512
4b4c1d11706e456e504930414607458dfa459ea4afe0519d1513120b34127bd4b8a7be69788772865eb937a81c76ca6038864ccfdc6824afa9db558b09bcda8a
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4e:X6QFElP6n+gJQMOtEvwDpjBmzDUp4e
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-