General
-
Target
2024-03-18_76d7e9758730d8e3954bc4d760538db6_cryptolocker
-
Size
46KB
-
Sample
240318-qzc1gaaa84
-
MD5
76d7e9758730d8e3954bc4d760538db6
-
SHA1
51f5a76b7f60d3f3a22d078b1404b93edae4371e
-
SHA256
620a584e1cbc98aae8edd508a3d75fa4b7a11fe2af1ff180423ee01976edbe96
-
SHA512
96ef3df1aa2230fac0ac05aa5b83c7319143a2ad23f596ff0900493d7e7e45e4e8fa2e2d976fe85b9ad708898018dbb7b3afac48b30212074e8a6cc508a6f37e
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxW:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xj
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-18_76d7e9758730d8e3954bc4d760538db6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-18_76d7e9758730d8e3954bc4d760538db6_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-18_76d7e9758730d8e3954bc4d760538db6_cryptolocker
-
Size
46KB
-
MD5
76d7e9758730d8e3954bc4d760538db6
-
SHA1
51f5a76b7f60d3f3a22d078b1404b93edae4371e
-
SHA256
620a584e1cbc98aae8edd508a3d75fa4b7a11fe2af1ff180423ee01976edbe96
-
SHA512
96ef3df1aa2230fac0ac05aa5b83c7319143a2ad23f596ff0900493d7e7e45e4e8fa2e2d976fe85b9ad708898018dbb7b3afac48b30212074e8a6cc508a6f37e
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxW:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-