General
-
Target
2024-03-19_5ae5e8f3be962bf9617ca3909ce895bc_cryptolocker
-
Size
72KB
-
Sample
240319-ybpncseb5v
-
MD5
5ae5e8f3be962bf9617ca3909ce895bc
-
SHA1
d4680f02592aaaa8e69c88519de77ea367b63bf6
-
SHA256
7190f4fa839b8cf0dc7947dd3fe2d81e40e6fa6a91cae962eb6c719502f950bd
-
SHA512
4d2bcb0715380b75ada9af936b110e654129646dea55f59a586d7539efac5ea0ea2ad3bbbc5d36e06c7766020a84773c34aa5e4439dba31401f0737efaa8744e
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHY:X6a+SOtEvwDpjBZYvQd28
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_5ae5e8f3be962bf9617ca3909ce895bc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_5ae5e8f3be962bf9617ca3909ce895bc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_5ae5e8f3be962bf9617ca3909ce895bc_cryptolocker
-
Size
72KB
-
MD5
5ae5e8f3be962bf9617ca3909ce895bc
-
SHA1
d4680f02592aaaa8e69c88519de77ea367b63bf6
-
SHA256
7190f4fa839b8cf0dc7947dd3fe2d81e40e6fa6a91cae962eb6c719502f950bd
-
SHA512
4d2bcb0715380b75ada9af936b110e654129646dea55f59a586d7539efac5ea0ea2ad3bbbc5d36e06c7766020a84773c34aa5e4439dba31401f0737efaa8744e
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHY:X6a+SOtEvwDpjBZYvQd28
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-