General
-
Target
2024-04-27_979e0551765ddfd181bc14ed08bdedba_cryptolocker
-
Size
67KB
-
Sample
240427-3h6yfaba59
-
MD5
979e0551765ddfd181bc14ed08bdedba
-
SHA1
e13604a93a65d1fb486cae1b9462126841109cf2
-
SHA256
cf45d34e3c17f3b58f9f25b230b66812248d477011179b6b5f70f70a0d7830fe
-
SHA512
80afa7b99dc821ff10450ca906f086ecf2d1f967c3a461f35a026b200a8e1d88cb69363c3e079f27f3cf19b7092e40f2dafa2e7e34e9b3c4b3379856a25ae1b7
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLo:aq7tdgI2MyzNORQtOflIwoHNV2XBFV75
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_979e0551765ddfd181bc14ed08bdedba_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_979e0551765ddfd181bc14ed08bdedba_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-27_979e0551765ddfd181bc14ed08bdedba_cryptolocker
-
Size
67KB
-
MD5
979e0551765ddfd181bc14ed08bdedba
-
SHA1
e13604a93a65d1fb486cae1b9462126841109cf2
-
SHA256
cf45d34e3c17f3b58f9f25b230b66812248d477011179b6b5f70f70a0d7830fe
-
SHA512
80afa7b99dc821ff10450ca906f086ecf2d1f967c3a461f35a026b200a8e1d88cb69363c3e079f27f3cf19b7092e40f2dafa2e7e34e9b3c4b3379856a25ae1b7
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLo:aq7tdgI2MyzNORQtOflIwoHNV2XBFV75
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-