General
-
Target
2024-04-17_163bbdd3c4c59e0ffd201af23142c125_cryptolocker
-
Size
48KB
-
Sample
240417-x5dbrabg38
-
MD5
163bbdd3c4c59e0ffd201af23142c125
-
SHA1
3ee903776e082d3b4eb53330cacdc5d6f87bd890
-
SHA256
1ec1e1f013c636591a8b9463bc53503e4594b86bfe6baec37a068f93d66eed02
-
SHA512
084aef8042b08660abe90ff3101bc218e8274e9afb587118dc9e217a29b9010cb21c56b5d783e0d4b49419d7c7291ee9455cb87ffb84d873b99beb8128938b14
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7H
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_163bbdd3c4c59e0ffd201af23142c125_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-17_163bbdd3c4c59e0ffd201af23142c125_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-17_163bbdd3c4c59e0ffd201af23142c125_cryptolocker
-
Size
48KB
-
MD5
163bbdd3c4c59e0ffd201af23142c125
-
SHA1
3ee903776e082d3b4eb53330cacdc5d6f87bd890
-
SHA256
1ec1e1f013c636591a8b9463bc53503e4594b86bfe6baec37a068f93d66eed02
-
SHA512
084aef8042b08660abe90ff3101bc218e8274e9afb587118dc9e217a29b9010cb21c56b5d783e0d4b49419d7c7291ee9455cb87ffb84d873b99beb8128938b14
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7H
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-