General
-
Target
2024-04-26_63ea8f34bc5aee6e254ce895edaef8f2_cryptolocker
-
Size
36KB
-
Sample
240426-fdbv6saa98
-
MD5
63ea8f34bc5aee6e254ce895edaef8f2
-
SHA1
0ff2579034fede74a75107827b623f21cb39a111
-
SHA256
30dddc306ded8b9421115057fec796661dc628f1366f9daa62fcb7deccee3f17
-
SHA512
8edc2f042b9432e87edb46a52f72cb415d308481eee10a327d090a823e6cfbc1a2ec830cd1752280c2c2543c56a3b42be9ed3b85db91ce71a5a173d529ad36b4
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm03:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_63ea8f34bc5aee6e254ce895edaef8f2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_63ea8f34bc5aee6e254ce895edaef8f2_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-26_63ea8f34bc5aee6e254ce895edaef8f2_cryptolocker
-
Size
36KB
-
MD5
63ea8f34bc5aee6e254ce895edaef8f2
-
SHA1
0ff2579034fede74a75107827b623f21cb39a111
-
SHA256
30dddc306ded8b9421115057fec796661dc628f1366f9daa62fcb7deccee3f17
-
SHA512
8edc2f042b9432e87edb46a52f72cb415d308481eee10a327d090a823e6cfbc1a2ec830cd1752280c2c2543c56a3b42be9ed3b85db91ce71a5a173d529ad36b4
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm03:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-