General
-
Target
2024-03-14_78993b26f6d09379617618a44ad5a89f_cryptolocker
-
Size
46KB
-
Sample
240314-xaj6tadh64
-
MD5
78993b26f6d09379617618a44ad5a89f
-
SHA1
9df3528cee124a73789d00be126cd471fb46756e
-
SHA256
0c2cc0a5b28c132015e7be60096eb6ddeac5e61e7ac1729b957994e5bade03ab
-
SHA512
253c5cf5f5558a3b70b40852553dd50ec381b99ca1cc55f66a1bb57072277b40c7a5f94e0a29faa4266a04117834a87ed292ebbde02eea4c6a2730c31b92cefa
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxW:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xr
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_78993b26f6d09379617618a44ad5a89f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-14_78993b26f6d09379617618a44ad5a89f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_78993b26f6d09379617618a44ad5a89f_cryptolocker
-
Size
46KB
-
MD5
78993b26f6d09379617618a44ad5a89f
-
SHA1
9df3528cee124a73789d00be126cd471fb46756e
-
SHA256
0c2cc0a5b28c132015e7be60096eb6ddeac5e61e7ac1729b957994e5bade03ab
-
SHA512
253c5cf5f5558a3b70b40852553dd50ec381b99ca1cc55f66a1bb57072277b40c7a5f94e0a29faa4266a04117834a87ed292ebbde02eea4c6a2730c31b92cefa
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxW:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xr
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-