General
-
Target
2024-03-19_1a6482b9efcd146f938995cf932955b4_cryptolocker
-
Size
73KB
-
Sample
240319-ty5wmsgd79
-
MD5
1a6482b9efcd146f938995cf932955b4
-
SHA1
2d3af6503d7dd432ccabdc6844c42149180487ff
-
SHA256
ab9f1d32158f367d7bdd3a44fd8f945fc272435d6edc6e57a9ecbccc3ebb7065
-
SHA512
5c7645eebb56b5d814d0d37538d1fb4fded98a1c108dbe9450d9d719d23493f9b3c4b40b9e35e340e2da26a3f7f8a030940bedef6cd4c95c59f15e7a86c40772
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1ml:X6a+SOtEvwDpjBZYvQd2K
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_1a6482b9efcd146f938995cf932955b4_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-19_1a6482b9efcd146f938995cf932955b4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_1a6482b9efcd146f938995cf932955b4_cryptolocker
-
Size
73KB
-
MD5
1a6482b9efcd146f938995cf932955b4
-
SHA1
2d3af6503d7dd432ccabdc6844c42149180487ff
-
SHA256
ab9f1d32158f367d7bdd3a44fd8f945fc272435d6edc6e57a9ecbccc3ebb7065
-
SHA512
5c7645eebb56b5d814d0d37538d1fb4fded98a1c108dbe9450d9d719d23493f9b3c4b40b9e35e340e2da26a3f7f8a030940bedef6cd4c95c59f15e7a86c40772
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1ml:X6a+SOtEvwDpjBZYvQd2K
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-