General
-
Target
2024-03-16_c0fe2f090c9d862176bbc586340c7999_cryptolocker
-
Size
50KB
-
Sample
240316-pykhgsbc3z
-
MD5
c0fe2f090c9d862176bbc586340c7999
-
SHA1
eb885144a86377728378872d278c27a658da362c
-
SHA256
d237d52109a382d004980f5cfb2a8a351c29fc7d70b112ee02711c301dee91ba
-
SHA512
52d3f26e5491454c8175507523b9909ca23a162b67ca27cd6f2edb2eeaacfd130d4686e99c25b2dc82d9a20096c4205f55a0b47b21089a6e2b2852085f3ab619
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcOamu:X6QFElP6n+gJBMOtEvwDpjBtExmlm
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-16_c0fe2f090c9d862176bbc586340c7999_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-16_c0fe2f090c9d862176bbc586340c7999_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-16_c0fe2f090c9d862176bbc586340c7999_cryptolocker
-
Size
50KB
-
MD5
c0fe2f090c9d862176bbc586340c7999
-
SHA1
eb885144a86377728378872d278c27a658da362c
-
SHA256
d237d52109a382d004980f5cfb2a8a351c29fc7d70b112ee02711c301dee91ba
-
SHA512
52d3f26e5491454c8175507523b9909ca23a162b67ca27cd6f2edb2eeaacfd130d4686e99c25b2dc82d9a20096c4205f55a0b47b21089a6e2b2852085f3ab619
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcOamu:X6QFElP6n+gJBMOtEvwDpjBtExmlm
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-