General
-
Target
2024-03-27_ef1179d671b69f0b8ebbce0b6d2181e6_cryptolocker
-
Size
123KB
-
Sample
240327-1jm6lsfg4y
-
MD5
ef1179d671b69f0b8ebbce0b6d2181e6
-
SHA1
9ea4e73cae94fe1f8f4f105f3131f6ede8f5c608
-
SHA256
a379f587b9b0e879c666de8e130b6af137b52f9aabf1a54f0a73b34eee595489
-
SHA512
2e77eeed748183879d550953e69aac6fbc5bf121646556836bf7ce365a53edf8b9b768c5777d801c3f588d438b75431037167a036d3d35d177b0dd3796ef6768
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgB:u6a++OtEvwDpj6zV
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_ef1179d671b69f0b8ebbce0b6d2181e6_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-27_ef1179d671b69f0b8ebbce0b6d2181e6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_ef1179d671b69f0b8ebbce0b6d2181e6_cryptolocker
-
Size
123KB
-
MD5
ef1179d671b69f0b8ebbce0b6d2181e6
-
SHA1
9ea4e73cae94fe1f8f4f105f3131f6ede8f5c608
-
SHA256
a379f587b9b0e879c666de8e130b6af137b52f9aabf1a54f0a73b34eee595489
-
SHA512
2e77eeed748183879d550953e69aac6fbc5bf121646556836bf7ce365a53edf8b9b768c5777d801c3f588d438b75431037167a036d3d35d177b0dd3796ef6768
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgB:u6a++OtEvwDpj6zV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-