General
-
Target
2024-04-29_f6586bdf9bab8e5ae3379e16541439b4_cryptolocker
-
Size
163KB
-
Sample
240429-sqv6sseb5y
-
MD5
f6586bdf9bab8e5ae3379e16541439b4
-
SHA1
99a83714aaa8cd0ccad69bc25b5713b0c98de1f5
-
SHA256
0526178a872c22b5334483e104bddee09114f1a97a37d3dd22f1f563845ec59c
-
SHA512
a97421197a2a212142c0d90d20cf8186da6222779f6709bd75fdde7d96669f891f1fd00264be5e0140af6abb96cbe56008ac0005fb1a75269f7fb03b792b7703
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMl:u6a++OtEvwDpj6ze
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_f6586bdf9bab8e5ae3379e16541439b4_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-29_f6586bdf9bab8e5ae3379e16541439b4_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_f6586bdf9bab8e5ae3379e16541439b4_cryptolocker
-
Size
163KB
-
MD5
f6586bdf9bab8e5ae3379e16541439b4
-
SHA1
99a83714aaa8cd0ccad69bc25b5713b0c98de1f5
-
SHA256
0526178a872c22b5334483e104bddee09114f1a97a37d3dd22f1f563845ec59c
-
SHA512
a97421197a2a212142c0d90d20cf8186da6222779f6709bd75fdde7d96669f891f1fd00264be5e0140af6abb96cbe56008ac0005fb1a75269f7fb03b792b7703
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwNgp699GNtL1eIEMl:u6a++OtEvwDpj6ze
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-