General
-
Target
2024-03-26_a7191f57b237a44112537bfd17854c0d_cryptolocker
-
Size
46KB
-
Sample
240326-ddg13scc33
-
MD5
a7191f57b237a44112537bfd17854c0d
-
SHA1
e2d4707c05a30d72d0db0756a1fd68cc145de6ac
-
SHA256
257920dc165975be2d979752fe364dadd382d50eb766921d1ae3944fe9ed2d4e
-
SHA512
837e254f7f78217037435bb736a01a530b3693b32c7c1a2f3a7f175d2b862835bb1d2e0155bd62c52cfb244396ad19d869db503b7cdb37516c0a6908068e05af
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55Si:X6QFElP6n+gJQMOtEvwDpjB0GIWSi
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_a7191f57b237a44112537bfd17854c0d_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-26_a7191f57b237a44112537bfd17854c0d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_a7191f57b237a44112537bfd17854c0d_cryptolocker
-
Size
46KB
-
MD5
a7191f57b237a44112537bfd17854c0d
-
SHA1
e2d4707c05a30d72d0db0756a1fd68cc145de6ac
-
SHA256
257920dc165975be2d979752fe364dadd382d50eb766921d1ae3944fe9ed2d4e
-
SHA512
837e254f7f78217037435bb736a01a530b3693b32c7c1a2f3a7f175d2b862835bb1d2e0155bd62c52cfb244396ad19d869db503b7cdb37516c0a6908068e05af
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55Si:X6QFElP6n+gJQMOtEvwDpjB0GIWSi
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-