General
-
Target
2024-04-23_a343e603b25ffb8544c010209912edc4_cryptolocker
-
Size
64KB
-
Sample
240423-gbc6wsdg68
-
MD5
a343e603b25ffb8544c010209912edc4
-
SHA1
e23603620bb31101c0dcf39dbac160eb6ec75463
-
SHA256
60e0a81bd0803ba70ecaaaa0d2abb0ed54c4c74bf60d32cc78ef076c1bcb7b61
-
SHA512
6cd96d32c938f1acd9b40e4a6bd955ffec42f325b0d0140f64cc41aaf386dd959c1178f49788042d3cb0c882e228366f082c6495c5586e4311e58aca8cb0d9b4
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGC:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_a343e603b25ffb8544c010209912edc4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-23_a343e603b25ffb8544c010209912edc4_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_a343e603b25ffb8544c010209912edc4_cryptolocker
-
Size
64KB
-
MD5
a343e603b25ffb8544c010209912edc4
-
SHA1
e23603620bb31101c0dcf39dbac160eb6ec75463
-
SHA256
60e0a81bd0803ba70ecaaaa0d2abb0ed54c4c74bf60d32cc78ef076c1bcb7b61
-
SHA512
6cd96d32c938f1acd9b40e4a6bd955ffec42f325b0d0140f64cc41aaf386dd959c1178f49788042d3cb0c882e228366f082c6495c5586e4311e58aca8cb0d9b4
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGC:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7b
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-