General
-
Target
2024-04-17_dc3d167862c82a9f4c356afd6870abf7_cryptolocker
-
Size
39KB
-
Sample
240417-kptbtaab98
-
MD5
dc3d167862c82a9f4c356afd6870abf7
-
SHA1
11d7839334bb77bf8722973daacf2dde00d4af37
-
SHA256
c0132ea234d91a2e6cbd02417905ceb3241165dc01c53df6b63faff2445b6f75
-
SHA512
aa152afe3b6474b07d4918ea5989faf871b54559351d253bea06bc80e67bd6dcac30b816bf4f20c094aab1bf2305c261551d5a5c056cad9166c33b0f15f9901d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr5:X6QFElP6n+gJQMOtEvwDpjBsYK6r5
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_dc3d167862c82a9f4c356afd6870abf7_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-17_dc3d167862c82a9f4c356afd6870abf7_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-17_dc3d167862c82a9f4c356afd6870abf7_cryptolocker
-
Size
39KB
-
MD5
dc3d167862c82a9f4c356afd6870abf7
-
SHA1
11d7839334bb77bf8722973daacf2dde00d4af37
-
SHA256
c0132ea234d91a2e6cbd02417905ceb3241165dc01c53df6b63faff2445b6f75
-
SHA512
aa152afe3b6474b07d4918ea5989faf871b54559351d253bea06bc80e67bd6dcac30b816bf4f20c094aab1bf2305c261551d5a5c056cad9166c33b0f15f9901d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr5:X6QFElP6n+gJQMOtEvwDpjBsYK6r5
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-