General
-
Target
2024-04-04_3d06d2c7ded8d793e91aefef31935d05_cryptolocker
-
Size
164KB
-
Sample
240404-t4j65acf2v
-
MD5
3d06d2c7ded8d793e91aefef31935d05
-
SHA1
6d702914996e5a555ed119831b06af19d517ed93
-
SHA256
1b3bedef4dd5802ac71f1cca549dc945f2b15e924d6fce505518a0c6850f69f1
-
SHA512
52ded0ed1e0ae8d566d4aca8fc94d90d8c2c73fcefb69e7f89a73e94282068082397da4e75fbd9b187a97de9f2c398ac8c2183ed08e6a300d30767586684a723
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1emEV:u6a++OtEvwDpj6zf
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-04_3d06d2c7ded8d793e91aefef31935d05_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-04_3d06d2c7ded8d793e91aefef31935d05_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-04-04_3d06d2c7ded8d793e91aefef31935d05_cryptolocker
-
Size
164KB
-
MD5
3d06d2c7ded8d793e91aefef31935d05
-
SHA1
6d702914996e5a555ed119831b06af19d517ed93
-
SHA256
1b3bedef4dd5802ac71f1cca549dc945f2b15e924d6fce505518a0c6850f69f1
-
SHA512
52ded0ed1e0ae8d566d4aca8fc94d90d8c2c73fcefb69e7f89a73e94282068082397da4e75fbd9b187a97de9f2c398ac8c2183ed08e6a300d30767586684a723
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1emEV:u6a++OtEvwDpj6zf
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-