General
-
Target
2024-04-20_814a360bde848541f4f6ccaeeabd180d_cryptolocker
-
Size
40KB
-
Sample
240420-e9vsgshe3s
-
MD5
814a360bde848541f4f6ccaeeabd180d
-
SHA1
ff4215f84444f909740012d9a2a6eee9b5d744fb
-
SHA256
c19ed214f49763e747705403eed238a8c3c65283913aa2d7f6f41b8910421ffb
-
SHA512
ac32d47c3357fb993bfba7d7421ea0e5d842589465db3f46bdaa32a1e5f5a6110cd4274ba7581c5f9eaed59d5e8e5d7c301109ca63049a905be28b6aff43e4f3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfra:X6QFElP6n+gJQMOtEvwDpjBsYK6ra
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_814a360bde848541f4f6ccaeeabd180d_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-20_814a360bde848541f4f6ccaeeabd180d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-20_814a360bde848541f4f6ccaeeabd180d_cryptolocker
-
Size
40KB
-
MD5
814a360bde848541f4f6ccaeeabd180d
-
SHA1
ff4215f84444f909740012d9a2a6eee9b5d744fb
-
SHA256
c19ed214f49763e747705403eed238a8c3c65283913aa2d7f6f41b8910421ffb
-
SHA512
ac32d47c3357fb993bfba7d7421ea0e5d842589465db3f46bdaa32a1e5f5a6110cd4274ba7581c5f9eaed59d5e8e5d7c301109ca63049a905be28b6aff43e4f3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfra:X6QFElP6n+gJQMOtEvwDpjBsYK6ra
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-