General
-
Target
2024-04-04_d1c370eca5d1c7ec64071b64c9e60ed7_cryptolocker
-
Size
80KB
-
Sample
240404-3qnf3adh4t
-
MD5
d1c370eca5d1c7ec64071b64c9e60ed7
-
SHA1
299b8419cfa5c58150b7930364b437d7be6a9a1d
-
SHA256
8b1b22f4d2aa51a767125068f2d4177ecaf3793b0cb4c1a5e50a75e8fdaa4515
-
SHA512
04680086d620efe588fb11fb90fc59a1ea65c96ef93f562c41d49a769844b30c0a5475c6618db12b7df6456c5a2b2602c23a882ccec02df9a26a308c6fbd55ce
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf7gB7sX:vCjsIOtEvwDpj5H9YvQd2z
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-04_d1c370eca5d1c7ec64071b64c9e60ed7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_d1c370eca5d1c7ec64071b64c9e60ed7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-04_d1c370eca5d1c7ec64071b64c9e60ed7_cryptolocker
-
Size
80KB
-
MD5
d1c370eca5d1c7ec64071b64c9e60ed7
-
SHA1
299b8419cfa5c58150b7930364b437d7be6a9a1d
-
SHA256
8b1b22f4d2aa51a767125068f2d4177ecaf3793b0cb4c1a5e50a75e8fdaa4515
-
SHA512
04680086d620efe588fb11fb90fc59a1ea65c96ef93f562c41d49a769844b30c0a5475c6618db12b7df6456c5a2b2602c23a882ccec02df9a26a308c6fbd55ce
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuf7gB7sX:vCjsIOtEvwDpj5H9YvQd2z
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-