General
-
Target
2024-04-10_da9bb5205923ad0732b84e4a4a9f76d2_cryptolocker
-
Size
50KB
-
Sample
240410-xp9p1sbh8v
-
MD5
da9bb5205923ad0732b84e4a4a9f76d2
-
SHA1
25449bfaf17e362c834cba81259bac06d6726894
-
SHA256
a82e80a05f3cbad73570966f1554de44a9041de597415ee11c7e6971c44b5332
-
SHA512
b37f638d31a9a5181b36af1529926ffa82ee7b3a1dfc40b377e2dc44647cb3ea0b26b843905d7d64d0c392dc8450a8075a8dbb7abb1695b2a7e9ad4d7497decb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxu:X6QFElP6n+gJBMOtEvwDpjBtExu
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_da9bb5205923ad0732b84e4a4a9f76d2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_da9bb5205923ad0732b84e4a4a9f76d2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_da9bb5205923ad0732b84e4a4a9f76d2_cryptolocker
-
Size
50KB
-
MD5
da9bb5205923ad0732b84e4a4a9f76d2
-
SHA1
25449bfaf17e362c834cba81259bac06d6726894
-
SHA256
a82e80a05f3cbad73570966f1554de44a9041de597415ee11c7e6971c44b5332
-
SHA512
b37f638d31a9a5181b36af1529926ffa82ee7b3a1dfc40b377e2dc44647cb3ea0b26b843905d7d64d0c392dc8450a8075a8dbb7abb1695b2a7e9ad4d7497decb
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxu:X6QFElP6n+gJBMOtEvwDpjBtExu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-