General
-
Target
2024-04-16_bcadf2beab7e51fa5e72257f95e63b61_cryptolocker
-
Size
82KB
-
Sample
240416-r9we8sed61
-
MD5
bcadf2beab7e51fa5e72257f95e63b61
-
SHA1
727dfb8821d1a8957b004443516befde89edf5d4
-
SHA256
1e7bbb1a9a288393317b1f1894eda93e83b76e7bc1c4dc78eea51e0de987395b
-
SHA512
d2829d9f87e9791e92496d936291c1fdb5fa49fd1eee25911a81b25210b9c80b1f8f26b173b08239cffe58328c924478bb926207bc09519c08a01c40823f2d10
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrMH:TCjsIOtEvwDpj5HE/OUHnSMS
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_bcadf2beab7e51fa5e72257f95e63b61_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_bcadf2beab7e51fa5e72257f95e63b61_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_bcadf2beab7e51fa5e72257f95e63b61_cryptolocker
-
Size
82KB
-
MD5
bcadf2beab7e51fa5e72257f95e63b61
-
SHA1
727dfb8821d1a8957b004443516befde89edf5d4
-
SHA256
1e7bbb1a9a288393317b1f1894eda93e83b76e7bc1c4dc78eea51e0de987395b
-
SHA512
d2829d9f87e9791e92496d936291c1fdb5fa49fd1eee25911a81b25210b9c80b1f8f26b173b08239cffe58328c924478bb926207bc09519c08a01c40823f2d10
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrMH:TCjsIOtEvwDpj5HE/OUHnSMS
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-