General
-
Target
2024-03-19_518587271502d49dbd1ae26a2e7ab94a_cryptolocker
-
Size
55KB
-
Sample
240319-c2r1hsfh7v
-
MD5
518587271502d49dbd1ae26a2e7ab94a
-
SHA1
b47c7e919da735ef5f655999943856dabbaf8429
-
SHA256
54409d1d9d9d8f1e470633cb3027d25a30703a9e342be1d8db2494764f3493bb
-
SHA512
a105de981b649240c4ba6574c3e620db6fbabc146477ba136824969b38824b2a084ce8e726fa7125828824f0fe75f488df970e92497d0c3635a3c974a4b18a86
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dl4W:vj+jsMQMOtEvwDpj5HH1nw73KOFi3
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_518587271502d49dbd1ae26a2e7ab94a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_518587271502d49dbd1ae26a2e7ab94a_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_518587271502d49dbd1ae26a2e7ab94a_cryptolocker
-
Size
55KB
-
MD5
518587271502d49dbd1ae26a2e7ab94a
-
SHA1
b47c7e919da735ef5f655999943856dabbaf8429
-
SHA256
54409d1d9d9d8f1e470633cb3027d25a30703a9e342be1d8db2494764f3493bb
-
SHA512
a105de981b649240c4ba6574c3e620db6fbabc146477ba136824969b38824b2a084ce8e726fa7125828824f0fe75f488df970e92497d0c3635a3c974a4b18a86
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFv6dl4W:vj+jsMQMOtEvwDpj5HH1nw73KOFi3
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-