General
-
Target
2024-04-23_5bfee847c0a6a743e86101b5d12f7f51_cryptolocker
-
Size
163KB
-
Sample
240423-2dlw2acd6y
-
MD5
5bfee847c0a6a743e86101b5d12f7f51
-
SHA1
a921ed91c4e2354b4bfb8153fce390b7f45d6b17
-
SHA256
bd6389aee2f15b0eba72c923c7b8fc5b30c5ea731204d2fab14ad549f6c82841
-
SHA512
05d249c79d0a56d8282e8d93ad752536f4a60b60948f8ceb0b420fa551e84b94ea1afecc04d1e460cea135baf003161d36aba1a038a05b04b6c2930567ba24e3
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMQ:u6a++OtEvwDpj6zP
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_5bfee847c0a6a743e86101b5d12f7f51_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-23_5bfee847c0a6a743e86101b5d12f7f51_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_5bfee847c0a6a743e86101b5d12f7f51_cryptolocker
-
Size
163KB
-
MD5
5bfee847c0a6a743e86101b5d12f7f51
-
SHA1
a921ed91c4e2354b4bfb8153fce390b7f45d6b17
-
SHA256
bd6389aee2f15b0eba72c923c7b8fc5b30c5ea731204d2fab14ad549f6c82841
-
SHA512
05d249c79d0a56d8282e8d93ad752536f4a60b60948f8ceb0b420fa551e84b94ea1afecc04d1e460cea135baf003161d36aba1a038a05b04b6c2930567ba24e3
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMQ:u6a++OtEvwDpj6zP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-