General
-
Target
2024-03-28_3e0de4d9af68be98655195d73da80b45_cryptolocker
-
Size
32KB
-
Sample
240328-d6q5fsbe23
-
MD5
3e0de4d9af68be98655195d73da80b45
-
SHA1
15fd520e862a3c850f9f252d9c59e69dcb05e2e4
-
SHA256
255d0f878b29cd5af3603c606f6cddb7c0afd80b40c5e0f4968f593af44af090
-
SHA512
643b461b41c80dac1b317e20bff67d38b2482b8d3cda4a3eca78508672dde452bf691da6b83216d02335a8f7f4f41238b4bf8d1f758ed87bde7f6efa2594f6d3
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7xF9/:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xu
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_3e0de4d9af68be98655195d73da80b45_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_3e0de4d9af68be98655195d73da80b45_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-28_3e0de4d9af68be98655195d73da80b45_cryptolocker
-
Size
32KB
-
MD5
3e0de4d9af68be98655195d73da80b45
-
SHA1
15fd520e862a3c850f9f252d9c59e69dcb05e2e4
-
SHA256
255d0f878b29cd5af3603c606f6cddb7c0afd80b40c5e0f4968f593af44af090
-
SHA512
643b461b41c80dac1b317e20bff67d38b2482b8d3cda4a3eca78508672dde452bf691da6b83216d02335a8f7f4f41238b4bf8d1f758ed87bde7f6efa2594f6d3
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7xF9/:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-