General
-
Target
2024-05-02_d3b997e4c0d71cbadcea48754aa84faf_cryptolocker
-
Size
45KB
-
Sample
240502-c3kb3agg78
-
MD5
d3b997e4c0d71cbadcea48754aa84faf
-
SHA1
a67565cb88f64f0a77a3ca18ac373f6f9c9632c7
-
SHA256
812dd8a051185542bb236da4dcba8a203e2be3016d73224180f4937d029c1443
-
SHA512
721b51683f29180df31bba75dbb6ac2c688a837f74c890df931878c848d1c12d28ab2eb8bbc22571e31b440b9e9ff2cc174f03ace717847ae691cd867333b7cb
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsBu:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3Wu
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-02_d3b997e4c0d71cbadcea48754aa84faf_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-02_d3b997e4c0d71cbadcea48754aa84faf_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-02_d3b997e4c0d71cbadcea48754aa84faf_cryptolocker
-
Size
45KB
-
MD5
d3b997e4c0d71cbadcea48754aa84faf
-
SHA1
a67565cb88f64f0a77a3ca18ac373f6f9c9632c7
-
SHA256
812dd8a051185542bb236da4dcba8a203e2be3016d73224180f4937d029c1443
-
SHA512
721b51683f29180df31bba75dbb6ac2c688a837f74c890df931878c848d1c12d28ab2eb8bbc22571e31b440b9e9ff2cc174f03ace717847ae691cd867333b7cb
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsBu:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3Wu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-