General
-
Target
2024-03-19_61d953abbee258995323a867a8e4e607_cryptolocker
-
Size
42KB
-
Sample
240319-ry87ysec96
-
MD5
61d953abbee258995323a867a8e4e607
-
SHA1
217848b9b20f2034e937ae57d1ff6a826ad809cd
-
SHA256
7f8dab3d4fd41b6846aceb02ccd080ef28e1a44c5002f4f676d0151b2b19502a
-
SHA512
b2bd271c3b8224b7aabf044fa51a9d7772c2890ece88ee972d4d3dad022bf31ec8357bc4635260f5c255e6617b9c2c0eb9ac2b12627498db93c5632bf952dfbc
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxU:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_61d953abbee258995323a867a8e4e607_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_61d953abbee258995323a867a8e4e607_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_61d953abbee258995323a867a8e4e607_cryptolocker
-
Size
42KB
-
MD5
61d953abbee258995323a867a8e4e607
-
SHA1
217848b9b20f2034e937ae57d1ff6a826ad809cd
-
SHA256
7f8dab3d4fd41b6846aceb02ccd080ef28e1a44c5002f4f676d0151b2b19502a
-
SHA512
b2bd271c3b8224b7aabf044fa51a9d7772c2890ece88ee972d4d3dad022bf31ec8357bc4635260f5c255e6617b9c2c0eb9ac2b12627498db93c5632bf952dfbc
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxU:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-