General
-
Target
2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker
-
Size
81KB
-
Sample
240420-hl3pzabf4z
-
MD5
e845a3fc97d69e1d34c1a8f71b1e892a
-
SHA1
9e21b0b61d7810ba295d672c3063fa0d595d7174
-
SHA256
6853f5133757eb1998809f20538dbcecdfc5970ea3c83c98f94aef1afb9693f9
-
SHA512
2ea268562d5b5c61b52a0da4089673e6d82e87f34710fa1c0b698a416d7067d7f0e2e1974fc33f1c4a1eae7062f0b197f0c5f40074c521e2083bcd9d2a566ccc
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqW:vCjsIOtEvwDpj5H9YvQd27
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-20_e845a3fc97d69e1d34c1a8f71b1e892a_cryptolocker
-
Size
81KB
-
MD5
e845a3fc97d69e1d34c1a8f71b1e892a
-
SHA1
9e21b0b61d7810ba295d672c3063fa0d595d7174
-
SHA256
6853f5133757eb1998809f20538dbcecdfc5970ea3c83c98f94aef1afb9693f9
-
SHA512
2ea268562d5b5c61b52a0da4089673e6d82e87f34710fa1c0b698a416d7067d7f0e2e1974fc33f1c4a1eae7062f0b197f0c5f40074c521e2083bcd9d2a566ccc
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqW:vCjsIOtEvwDpj5H9YvQd27
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-