General
-
Target
2024-04-20_05c4923437c47ca4ea93cf620e694d8b_cryptolocker
-
Size
123KB
-
Sample
240420-mgt99aed25
-
MD5
05c4923437c47ca4ea93cf620e694d8b
-
SHA1
7e17109428e06c027076bf72c4d81bf9b83ca194
-
SHA256
f9f6ba8dc5f53b8cf001412194f8e2a13fed321d2f845d636685c0d9c4cd6eb8
-
SHA512
9cbda588a8c587a7a870f852858c9e70c0b3d71e4d493ef42ca7933bcb7b5eb312ac9d59ef627dec334936d0ba3d01dc939d9189a16a1334116e465d379c4954
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgKH:u6a++OtEvwDpj6zE
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_05c4923437c47ca4ea93cf620e694d8b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-20_05c4923437c47ca4ea93cf620e694d8b_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-20_05c4923437c47ca4ea93cf620e694d8b_cryptolocker
-
Size
123KB
-
MD5
05c4923437c47ca4ea93cf620e694d8b
-
SHA1
7e17109428e06c027076bf72c4d81bf9b83ca194
-
SHA256
f9f6ba8dc5f53b8cf001412194f8e2a13fed321d2f845d636685c0d9c4cd6eb8
-
SHA512
9cbda588a8c587a7a870f852858c9e70c0b3d71e4d493ef42ca7933bcb7b5eb312ac9d59ef627dec334936d0ba3d01dc939d9189a16a1334116e465d379c4954
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgKH:u6a++OtEvwDpj6zE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-