General
-
Target
2024-03-27_3f9c35b2ffd4f3c0bc4b701f2b28c38b_cryptolocker
-
Size
47KB
-
Sample
240327-v3l5rscc8t
-
MD5
3f9c35b2ffd4f3c0bc4b701f2b28c38b
-
SHA1
c9378e27a4b470f2c4c953a11f161f6c5712601f
-
SHA256
8454e45d1ce15cd06e3d8c2d02e0915a28826fbaded695649a30562b44c685a2
-
SHA512
fd896a5e3331345fd739e2b8d75619beff859da17483790b1eed90858fef12b406c48cc9e60101303d23158aade07deb9cfa673b826fbee8569cad7bbfb6672e
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXI:X6QFElP6n+gJBMOtEvwDpjBtEdXI
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_3f9c35b2ffd4f3c0bc4b701f2b28c38b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_3f9c35b2ffd4f3c0bc4b701f2b28c38b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_3f9c35b2ffd4f3c0bc4b701f2b28c38b_cryptolocker
-
Size
47KB
-
MD5
3f9c35b2ffd4f3c0bc4b701f2b28c38b
-
SHA1
c9378e27a4b470f2c4c953a11f161f6c5712601f
-
SHA256
8454e45d1ce15cd06e3d8c2d02e0915a28826fbaded695649a30562b44c685a2
-
SHA512
fd896a5e3331345fd739e2b8d75619beff859da17483790b1eed90858fef12b406c48cc9e60101303d23158aade07deb9cfa673b826fbee8569cad7bbfb6672e
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXI:X6QFElP6n+gJBMOtEvwDpjBtEdXI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-