General
-
Target
2024-04-23_321b3d1f36ff41b56b327a01b827cfa0_cryptolocker
-
Size
47KB
-
Sample
240423-d2qywscd55
-
MD5
321b3d1f36ff41b56b327a01b827cfa0
-
SHA1
eb2b79236d2a95550672a1330b9026ef0ad6a0bb
-
SHA256
8b29e5a5edb9c089f074c1cf490e6dda07d3e6517311195d4f174b0c0e24c90e
-
SHA512
1336a3cf82e92289ee8f85350d0a9abf1ab3a09300d682130f3677bab1b1bd9f8f9b6b1caedb7a921319f4a105d628781060eabbdda21ddd7a4d4b350ad3c5b5
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcj:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfj
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_321b3d1f36ff41b56b327a01b827cfa0_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-23_321b3d1f36ff41b56b327a01b827cfa0_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_321b3d1f36ff41b56b327a01b827cfa0_cryptolocker
-
Size
47KB
-
MD5
321b3d1f36ff41b56b327a01b827cfa0
-
SHA1
eb2b79236d2a95550672a1330b9026ef0ad6a0bb
-
SHA256
8b29e5a5edb9c089f074c1cf490e6dda07d3e6517311195d4f174b0c0e24c90e
-
SHA512
1336a3cf82e92289ee8f85350d0a9abf1ab3a09300d682130f3677bab1b1bd9f8f9b6b1caedb7a921319f4a105d628781060eabbdda21ddd7a4d4b350ad3c5b5
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcj:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-