General
-
Target
2024-05-09_1f5615516b22db761d4ec9727c63a08c_cryptolocker
-
Size
83KB
-
Sample
240509-2mse6sag9w
-
MD5
1f5615516b22db761d4ec9727c63a08c
-
SHA1
d6bad73c5c887f5341e6c899ab05a42863b76880
-
SHA256
8e7144e35312bca53c34864e60fec81b1ca8fe09077c133cba5229249a29b324
-
SHA512
98042023f4b0b4728af05cc5d94c84ea060702ea840f46dc0a738cf59f232f241920c691817218d9a4982cbd31af302f3af9e7cab7fefbf618241d222a71746e
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+:TCjsIOtEvwDpj5HE/OUHnSMX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_1f5615516b22db761d4ec9727c63a08c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_1f5615516b22db761d4ec9727c63a08c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-09_1f5615516b22db761d4ec9727c63a08c_cryptolocker
-
Size
83KB
-
MD5
1f5615516b22db761d4ec9727c63a08c
-
SHA1
d6bad73c5c887f5341e6c899ab05a42863b76880
-
SHA256
8e7144e35312bca53c34864e60fec81b1ca8fe09077c133cba5229249a29b324
-
SHA512
98042023f4b0b4728af05cc5d94c84ea060702ea840f46dc0a738cf59f232f241920c691817218d9a4982cbd31af302f3af9e7cab7fefbf618241d222a71746e
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+:TCjsIOtEvwDpj5HE/OUHnSMX
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-