General
-
Target
2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker
-
Size
86KB
-
Sample
240521-f4qf9abd73
-
MD5
cfc69ca5f171f44c6c81200731b390f2
-
SHA1
a2e5d942bbffba5262d5503e52d2bdff8093d500
-
SHA256
bb9ff139fa4ce9c4c6a23367af40e239fb95985229533d41a4ab10a8d6c145c5
-
SHA512
3b9149fed1251b4fba2e3488a64c80fec49efc75fa36c3b9f04a8d904109e1fff33c79b24631fe786a9487564693a27bd94e2afa763c83d58f131b42a6dd733a
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6av:V6a+pOtEvwDpjvpb
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_cfc69ca5f171f44c6c81200731b390f2_cryptolocker
-
Size
86KB
-
MD5
cfc69ca5f171f44c6c81200731b390f2
-
SHA1
a2e5d942bbffba5262d5503e52d2bdff8093d500
-
SHA256
bb9ff139fa4ce9c4c6a23367af40e239fb95985229533d41a4ab10a8d6c145c5
-
SHA512
3b9149fed1251b4fba2e3488a64c80fec49efc75fa36c3b9f04a8d904109e1fff33c79b24631fe786a9487564693a27bd94e2afa763c83d58f131b42a6dd733a
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNl6av:V6a+pOtEvwDpjvpb
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-