General
-
Target
2024-04-24_447ca6806ef2db20485c607d17db63d7_cryptolocker
-
Size
84KB
-
Sample
240424-axdwzsda9t
-
MD5
447ca6806ef2db20485c607d17db63d7
-
SHA1
d2a7ccdef2fa28860ebe133f8e294cfd14d8b6c7
-
SHA256
14c6f8520edee094586244f530782ca92c4a568fa61c4604ba5b1632da77455e
-
SHA512
06b82df2185779825e95361b339319c76f97b78077acf14dc7996c935e9c8f317ffc18f6fe658c98ed705f7acffacf0d9e2cea8ba39a5eb04a36412cf1162e6b
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnjh:V6QFElP6n+gMQMOtEvwDpjyaLccVNlL
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_447ca6806ef2db20485c607d17db63d7_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-24_447ca6806ef2db20485c607d17db63d7_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_447ca6806ef2db20485c607d17db63d7_cryptolocker
-
Size
84KB
-
MD5
447ca6806ef2db20485c607d17db63d7
-
SHA1
d2a7ccdef2fa28860ebe133f8e294cfd14d8b6c7
-
SHA256
14c6f8520edee094586244f530782ca92c4a568fa61c4604ba5b1632da77455e
-
SHA512
06b82df2185779825e95361b339319c76f97b78077acf14dc7996c935e9c8f317ffc18f6fe658c98ed705f7acffacf0d9e2cea8ba39a5eb04a36412cf1162e6b
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnjh:V6QFElP6n+gMQMOtEvwDpjyaLccVNlL
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-