General
-
Target
2024-04-23_b18986a808394c15e18f60e7da792512_cryptolocker
-
Size
73KB
-
Sample
240423-3hs2kscg61
-
MD5
b18986a808394c15e18f60e7da792512
-
SHA1
cd84d2a1974f188fdca29085aa06f3e71523ec6f
-
SHA256
c1612cf2f706062a25dda9d6fdff2ad2980514e5ca8a539b99ee6d5af170ff14
-
SHA512
d2cc17b3ffb1d14cb21d33466aa5208cf6d364b197040d42e108ce472298b7ae776aa85335d8d8011651fe4624d163c550b0118a48357907316c16942ce4eab0
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1svrt:X6a+SOtEvwDpjBZYvQd28x
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_b18986a808394c15e18f60e7da792512_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-23_b18986a808394c15e18f60e7da792512_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-23_b18986a808394c15e18f60e7da792512_cryptolocker
-
Size
73KB
-
MD5
b18986a808394c15e18f60e7da792512
-
SHA1
cd84d2a1974f188fdca29085aa06f3e71523ec6f
-
SHA256
c1612cf2f706062a25dda9d6fdff2ad2980514e5ca8a539b99ee6d5af170ff14
-
SHA512
d2cc17b3ffb1d14cb21d33466aa5208cf6d364b197040d42e108ce472298b7ae776aa85335d8d8011651fe4624d163c550b0118a48357907316c16942ce4eab0
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1svrt:X6a+SOtEvwDpjBZYvQd28x
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-