General
-
Target
2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker
-
Size
83KB
-
Sample
240420-vpnfnsdg7x
-
MD5
f56ac8c74578e6389ad629fc3fefbed2
-
SHA1
5169b2a407caf3791dcdb1b6e7fd5bab3e86326d
-
SHA256
35ad29873b334a16ad3bd730b512fd35cc5b6e10f78f44e31fc0150180907203
-
SHA512
f7d37429f64ee11ac096c90c9ab390b23bb7b14ccdcdd707dc2c90ad29914d77f0dfad769b42e6a892649018d1876ba8ba9eaf824238bb51e854a61cb256460e
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBQ:vCjsIOtEvwDpj5H9YvQd24
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-20_f56ac8c74578e6389ad629fc3fefbed2_cryptolocker
-
Size
83KB
-
MD5
f56ac8c74578e6389ad629fc3fefbed2
-
SHA1
5169b2a407caf3791dcdb1b6e7fd5bab3e86326d
-
SHA256
35ad29873b334a16ad3bd730b512fd35cc5b6e10f78f44e31fc0150180907203
-
SHA512
f7d37429f64ee11ac096c90c9ab390b23bb7b14ccdcdd707dc2c90ad29914d77f0dfad769b42e6a892649018d1876ba8ba9eaf824238bb51e854a61cb256460e
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBQ:vCjsIOtEvwDpj5H9YvQd24
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-