General
-
Target
2024-04-29_be810379ce3837ac82191ce2e90347db_cryptolocker
-
Size
61KB
-
Sample
240429-zbg4ysca8x
-
MD5
be810379ce3837ac82191ce2e90347db
-
SHA1
22bbc81e440d253a3f71e5bca0f23e09a72b9d2f
-
SHA256
de598f68194dd34593c659ecda19686c1e499f0d32cc897d9725e4835bead385
-
SHA512
e5a3ed435ddd7625e448c7dbe00d21cf676d7d0fef939305b58308888cb05f0b332c8fcf6d619db1fdc010fd21373af9f920397ed251fff365caa08fd52406c2
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9o:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWR
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-29_be810379ce3837ac82191ce2e90347db_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-29_be810379ce3837ac82191ce2e90347db_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-29_be810379ce3837ac82191ce2e90347db_cryptolocker
-
Size
61KB
-
MD5
be810379ce3837ac82191ce2e90347db
-
SHA1
22bbc81e440d253a3f71e5bca0f23e09a72b9d2f
-
SHA256
de598f68194dd34593c659ecda19686c1e499f0d32cc897d9725e4835bead385
-
SHA512
e5a3ed435ddd7625e448c7dbe00d21cf676d7d0fef939305b58308888cb05f0b332c8fcf6d619db1fdc010fd21373af9f920397ed251fff365caa08fd52406c2
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9o:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWR
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-