General
-
Target
2024-05-01_34d992ecd0a05690b007839ada145bf9_cryptolocker
-
Size
85KB
-
Sample
240501-txtrzsbb2w
-
MD5
34d992ecd0a05690b007839ada145bf9
-
SHA1
b88f4be1675b6b32a11622ee2d1fcfb797b91cae
-
SHA256
fc7a31e2e0e0100e7412f95745e3e6c47036336ba8ddd69adf8b49735a1e034d
-
SHA512
0100806c1382099f52ae6228b963d8674b7446807daacbc5eb9f87fa46385a403e647994aa3a5a5a854245dab61a0cd89a5ce2f9fa03320b67a2b8ac02cc60f1
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBC:vCjsIOtEvwDpj5H9YvQd26
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_34d992ecd0a05690b007839ada145bf9_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-01_34d992ecd0a05690b007839ada145bf9_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_34d992ecd0a05690b007839ada145bf9_cryptolocker
-
Size
85KB
-
MD5
34d992ecd0a05690b007839ada145bf9
-
SHA1
b88f4be1675b6b32a11622ee2d1fcfb797b91cae
-
SHA256
fc7a31e2e0e0100e7412f95745e3e6c47036336ba8ddd69adf8b49735a1e034d
-
SHA512
0100806c1382099f52ae6228b963d8674b7446807daacbc5eb9f87fa46385a403e647994aa3a5a5a854245dab61a0cd89a5ce2f9fa03320b67a2b8ac02cc60f1
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBC:vCjsIOtEvwDpj5H9YvQd26
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-