General
-
Target
2024-03-29_874b8d20a96947d537d24af32a878855_cryptolocker
-
Size
47KB
-
Sample
240329-vhb43ade96
-
MD5
874b8d20a96947d537d24af32a878855
-
SHA1
6b9f3dde4be8635f5d82f84c7d90b6bb2d616b8f
-
SHA256
7becc810b1bd6ec4ca65c18969d0b1fcba66b9b4c676a29efbcc7925b46ad3ca
-
SHA512
0c99cc015405e3c9b26d1e978d69cf7b5643152637e11cd6ee31eb4ca9110f96494c213bfdd0f468e51ff19aad3ee740b7bb7899ac3c7ea5c0546d8545452b8e
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvO:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvO
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_874b8d20a96947d537d24af32a878855_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-29_874b8d20a96947d537d24af32a878855_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-29_874b8d20a96947d537d24af32a878855_cryptolocker
-
Size
47KB
-
MD5
874b8d20a96947d537d24af32a878855
-
SHA1
6b9f3dde4be8635f5d82f84c7d90b6bb2d616b8f
-
SHA256
7becc810b1bd6ec4ca65c18969d0b1fcba66b9b4c676a29efbcc7925b46ad3ca
-
SHA512
0c99cc015405e3c9b26d1e978d69cf7b5643152637e11cd6ee31eb4ca9110f96494c213bfdd0f468e51ff19aad3ee740b7bb7899ac3c7ea5c0546d8545452b8e
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvO:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvO
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-