General
-
Target
2024-05-04_3f90aab4fdb30c7927f339d14d1b5e84_cryptolocker
-
Size
36KB
-
Sample
240504-y76lraac9z
-
MD5
3f90aab4fdb30c7927f339d14d1b5e84
-
SHA1
4ff3caa8629bc78b68b96fc5359e12f063a7c72c
-
SHA256
188df6f3dde722f403acd4dfe3f9fb21189aeeb0a0b0b8e98e3a9e2f33c0c4d2
-
SHA512
ba1c9971b96fb7c9a4e9eb49cca7ebf08358efc818e07501936d810a04768c436de96409a268643c6afb0863b5f5eab3beae430d42a090bd4bc0060d338835e4
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0C:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XE
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_3f90aab4fdb30c7927f339d14d1b5e84_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-04_3f90aab4fdb30c7927f339d14d1b5e84_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-04_3f90aab4fdb30c7927f339d14d1b5e84_cryptolocker
-
Size
36KB
-
MD5
3f90aab4fdb30c7927f339d14d1b5e84
-
SHA1
4ff3caa8629bc78b68b96fc5359e12f063a7c72c
-
SHA256
188df6f3dde722f403acd4dfe3f9fb21189aeeb0a0b0b8e98e3a9e2f33c0c4d2
-
SHA512
ba1c9971b96fb7c9a4e9eb49cca7ebf08358efc818e07501936d810a04768c436de96409a268643c6afb0863b5f5eab3beae430d42a090bd4bc0060d338835e4
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0C:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-