General
-
Target
2024-05-15_3bc99276b71388f76692557be491bae5_cryptolocker
-
Size
53KB
-
Sample
240515-e8wy6ahf76
-
MD5
3bc99276b71388f76692557be491bae5
-
SHA1
39d05e88cf11583b13d60518dbb29ca124c219f9
-
SHA256
a1e195f1afb560131a912a46526083cf26f9c434308292fb6a559f3bd8b939e6
-
SHA512
da0e6c606465a3409f72b517bf2418de5c016731a780022a986972bdd59a081a29490b13bbf650bc1d886d7f8a4b16b6f5f522383cab24db13870e5bd95e9f8b
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojaklPs9:V6a+pOtEvwDpjp
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_3bc99276b71388f76692557be491bae5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-15_3bc99276b71388f76692557be491bae5_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-15_3bc99276b71388f76692557be491bae5_cryptolocker
-
Size
53KB
-
MD5
3bc99276b71388f76692557be491bae5
-
SHA1
39d05e88cf11583b13d60518dbb29ca124c219f9
-
SHA256
a1e195f1afb560131a912a46526083cf26f9c434308292fb6a559f3bd8b939e6
-
SHA512
da0e6c606465a3409f72b517bf2418de5c016731a780022a986972bdd59a081a29490b13bbf650bc1d886d7f8a4b16b6f5f522383cab24db13870e5bd95e9f8b
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojaklPs9:V6a+pOtEvwDpjp
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-