General
-
Target
2024-03-26_dd6d00a02c48f0e5c1129e3e81ee976d_cryptolocker
-
Size
47KB
-
Sample
240326-3wljnafa99
-
MD5
dd6d00a02c48f0e5c1129e3e81ee976d
-
SHA1
c141b83d71ee7a262b7b5542669e8d8da6d7fab5
-
SHA256
5698f14ef59b3733199872f2698611b2e94c7a22946c092131c808dc0fff707c
-
SHA512
803a7488224c99a069fecb1d6fc942b1efcb24b646cf88198bff95fe8bf97f81f9c37b51bebdd0e2ac27827db9ad187d93f3327e8f1f0c56ebb955b5d6403a03
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdX6:X6QFElP6n+gJBMOtEvwDpjBtEdX6
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_dd6d00a02c48f0e5c1129e3e81ee976d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_dd6d00a02c48f0e5c1129e3e81ee976d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_dd6d00a02c48f0e5c1129e3e81ee976d_cryptolocker
-
Size
47KB
-
MD5
dd6d00a02c48f0e5c1129e3e81ee976d
-
SHA1
c141b83d71ee7a262b7b5542669e8d8da6d7fab5
-
SHA256
5698f14ef59b3733199872f2698611b2e94c7a22946c092131c808dc0fff707c
-
SHA512
803a7488224c99a069fecb1d6fc942b1efcb24b646cf88198bff95fe8bf97f81f9c37b51bebdd0e2ac27827db9ad187d93f3327e8f1f0c56ebb955b5d6403a03
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdX6:X6QFElP6n+gJBMOtEvwDpjBtEdX6
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-