General
-
Target
2024-03-15_e83975a026c19acf720b16693ae5c7d6_cryptolocker
-
Size
50KB
-
Sample
240315-rhfkpscf25
-
MD5
e83975a026c19acf720b16693ae5c7d6
-
SHA1
398a6523dd3d81d94acd31c0f5c5c41696388713
-
SHA256
5dbc4fd8ff6ccc16509240eaf8a9c2be6669d7d6dba49012f2bbc582c7ddd9eb
-
SHA512
7dcb04403781ae23ff65f7cedbdc84a1b4260cb6e42b75ed8cbb5b222f194afd7a2cd6bf684acfe6ff97908fef1a6226906c3c7a7aa434a72ca232f8fb4aab16
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxa:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7G
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_e83975a026c19acf720b16693ae5c7d6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_e83975a026c19acf720b16693ae5c7d6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_e83975a026c19acf720b16693ae5c7d6_cryptolocker
-
Size
50KB
-
MD5
e83975a026c19acf720b16693ae5c7d6
-
SHA1
398a6523dd3d81d94acd31c0f5c5c41696388713
-
SHA256
5dbc4fd8ff6ccc16509240eaf8a9c2be6669d7d6dba49012f2bbc582c7ddd9eb
-
SHA512
7dcb04403781ae23ff65f7cedbdc84a1b4260cb6e42b75ed8cbb5b222f194afd7a2cd6bf684acfe6ff97908fef1a6226906c3c7a7aa434a72ca232f8fb4aab16
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIKxa:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7G
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-