General
-
Target
2024-04-16_f89161e4356c537873a5f9ad235fdebd_cryptolocker
-
Size
163KB
-
Sample
240416-nse55shd63
-
MD5
f89161e4356c537873a5f9ad235fdebd
-
SHA1
625f211e32fa8f67f139aa1488cf3066da4509c2
-
SHA256
efc585005167abe6a76392600dfa5af604fde1b2b6be913ccf413decdabb27a1
-
SHA512
ddfcf194dfd86b56d1d22c2fb023afce4364bf71981d494978fbe72bd10dd79c4fce55b8f046a09cab0219e32df9e9140860acad5ad06d1341a02a2d31c96316
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMJ:u6a++OtEvwDpj6zq
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_f89161e4356c537873a5f9ad235fdebd_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_f89161e4356c537873a5f9ad235fdebd_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_f89161e4356c537873a5f9ad235fdebd_cryptolocker
-
Size
163KB
-
MD5
f89161e4356c537873a5f9ad235fdebd
-
SHA1
625f211e32fa8f67f139aa1488cf3066da4509c2
-
SHA256
efc585005167abe6a76392600dfa5af604fde1b2b6be913ccf413decdabb27a1
-
SHA512
ddfcf194dfd86b56d1d22c2fb023afce4364bf71981d494978fbe72bd10dd79c4fce55b8f046a09cab0219e32df9e9140860acad5ad06d1341a02a2d31c96316
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMJ:u6a++OtEvwDpj6zq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-