General
-
Target
2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker
-
Size
34KB
-
Sample
240326-t2nrjahc91
-
MD5
437d017041692f428b361290cac9e8d3
-
SHA1
89e8551c62523cb4c28e7d77d12cd2a0b2f08ce7
-
SHA256
129b4dcfcd11db17ad7c2ce9b3bc6cbf88d6eb62b768ae038b88b5db2c887842
-
SHA512
a9cdb75f96a8c3e432acc98c22c463dc094b9c02e9fe185cf0889fd566453d894323721c7ddb798fb99c6a01026d63b13ac58f35ab4eca90e5fec0dbc3abb4a2
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+45FK:fT+hsMQMOtEvwDpjoIH50
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_437d017041692f428b361290cac9e8d3_cryptolocker
-
Size
34KB
-
MD5
437d017041692f428b361290cac9e8d3
-
SHA1
89e8551c62523cb4c28e7d77d12cd2a0b2f08ce7
-
SHA256
129b4dcfcd11db17ad7c2ce9b3bc6cbf88d6eb62b768ae038b88b5db2c887842
-
SHA512
a9cdb75f96a8c3e432acc98c22c463dc094b9c02e9fe185cf0889fd566453d894323721c7ddb798fb99c6a01026d63b13ac58f35ab4eca90e5fec0dbc3abb4a2
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+45FK:fT+hsMQMOtEvwDpjoIH50
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-