General
-
Target
2024-03-16_33640fd111ed9e712e343a37fa20c879_cryptolocker
-
Size
45KB
-
Sample
240316-mhqnfsbb35
-
MD5
33640fd111ed9e712e343a37fa20c879
-
SHA1
b1799c279a08415bbd3986dd7cf42c8473a8a0fd
-
SHA256
13f057dd7ed73af522b657061ce5e7c228027c50b292a2b1c8c4c818c23df4c3
-
SHA512
e7d401b5e69e22c2e48e5a77cba5c74da0f358878e6f2cfbb9053379aed23b6d9e1000cd7bb2edcec623f47f910fd66154c2ad1739c8db547b33a4f13f8b6928
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUa:vj+jsMQMOtEvwDpj5Hczer5iV
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-16_33640fd111ed9e712e343a37fa20c879_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-16_33640fd111ed9e712e343a37fa20c879_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-16_33640fd111ed9e712e343a37fa20c879_cryptolocker
-
Size
45KB
-
MD5
33640fd111ed9e712e343a37fa20c879
-
SHA1
b1799c279a08415bbd3986dd7cf42c8473a8a0fd
-
SHA256
13f057dd7ed73af522b657061ce5e7c228027c50b292a2b1c8c4c818c23df4c3
-
SHA512
e7d401b5e69e22c2e48e5a77cba5c74da0f358878e6f2cfbb9053379aed23b6d9e1000cd7bb2edcec623f47f910fd66154c2ad1739c8db547b33a4f13f8b6928
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUa:vj+jsMQMOtEvwDpj5Hczer5iV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-