General
-
Target
2024-04-22_4a3cc1ccd27c4c9c027e7025868a2f6d_cryptolocker
-
Size
163KB
-
Sample
240422-klmd4ahe99
-
MD5
4a3cc1ccd27c4c9c027e7025868a2f6d
-
SHA1
da41a8a4a54f29996c87b9d88c0c505e9993a354
-
SHA256
c51f3eaa1e6d35cd071fbdeb9f08e3237ff9aa05275f09f9468ff39f5c0295c9
-
SHA512
f8f43c7d64d310e45fe79dfaf33e574ccb36fb7e31f4c1793a7fde5462c1385fb0ec93ced1d77ae020161f319d724257b9ca80a54e1bcac0b2150db4026b9473
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMA:u6a++OtEvwDpj6zH
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_4a3cc1ccd27c4c9c027e7025868a2f6d_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-22_4a3cc1ccd27c4c9c027e7025868a2f6d_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_4a3cc1ccd27c4c9c027e7025868a2f6d_cryptolocker
-
Size
163KB
-
MD5
4a3cc1ccd27c4c9c027e7025868a2f6d
-
SHA1
da41a8a4a54f29996c87b9d88c0c505e9993a354
-
SHA256
c51f3eaa1e6d35cd071fbdeb9f08e3237ff9aa05275f09f9468ff39f5c0295c9
-
SHA512
f8f43c7d64d310e45fe79dfaf33e574ccb36fb7e31f4c1793a7fde5462c1385fb0ec93ced1d77ae020161f319d724257b9ca80a54e1bcac0b2150db4026b9473
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMA:u6a++OtEvwDpj6zH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-