General
-
Target
2024-05-03_95662196f81bf1a718dafd40e5e95cda_cryptolocker
-
Size
47KB
-
Sample
240503-y86yxahe44
-
MD5
95662196f81bf1a718dafd40e5e95cda
-
SHA1
89c05d06fdf8c48ffc367bb39fc1afc8d59b15f5
-
SHA256
1cb54fc1372d7a30079463584198a8054ffc16c589a3345aa4b52b82878e7e87
-
SHA512
3488ac844d1affa5dc200ccf0860317dca38f5c32a611ca64141cb8b14db4d683e782537c8c1774b2ad0152bd8a9678ed5dc26c27fb8b5413addf33071937c4c
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDF27:79mqyNhQMOtEvwDpjBzck1W87
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_95662196f81bf1a718dafd40e5e95cda_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-03_95662196f81bf1a718dafd40e5e95cda_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-03_95662196f81bf1a718dafd40e5e95cda_cryptolocker
-
Size
47KB
-
MD5
95662196f81bf1a718dafd40e5e95cda
-
SHA1
89c05d06fdf8c48ffc367bb39fc1afc8d59b15f5
-
SHA256
1cb54fc1372d7a30079463584198a8054ffc16c589a3345aa4b52b82878e7e87
-
SHA512
3488ac844d1affa5dc200ccf0860317dca38f5c32a611ca64141cb8b14db4d683e782537c8c1774b2ad0152bd8a9678ed5dc26c27fb8b5413addf33071937c4c
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvccwDF27:79mqyNhQMOtEvwDpjBzck1W87
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-