General
-
Target
2024-05-23_9ff98c3ba942cb463f2b836d278b7243_cryptolocker
-
Size
73KB
-
Sample
240523-c3twhaba65
-
MD5
9ff98c3ba942cb463f2b836d278b7243
-
SHA1
1d2d32601878887508e3902f64f8cd2683299764
-
SHA256
dd8d5b23098ff2e54cbbfd248e4f5689e2c7cf0d72a335df4b1f02235f4e3464
-
SHA512
a81a69b8a7df081269405f568a1dec7a532af10eca1b08e9b83033c836a75722dd336cf892f828bccfe80b7334896ad72eae9cd519b0ef5d37f65c4555c67ef5
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsE:u6QFElP6n+gWMOtEvwDpjJGYQbE
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_9ff98c3ba942cb463f2b836d278b7243_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-23_9ff98c3ba942cb463f2b836d278b7243_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_9ff98c3ba942cb463f2b836d278b7243_cryptolocker
-
Size
73KB
-
MD5
9ff98c3ba942cb463f2b836d278b7243
-
SHA1
1d2d32601878887508e3902f64f8cd2683299764
-
SHA256
dd8d5b23098ff2e54cbbfd248e4f5689e2c7cf0d72a335df4b1f02235f4e3464
-
SHA512
a81a69b8a7df081269405f568a1dec7a532af10eca1b08e9b83033c836a75722dd336cf892f828bccfe80b7334896ad72eae9cd519b0ef5d37f65c4555c67ef5
-
SSDEEP
768:u6LsoEEeegiZPvEhHSG+gZgtOOtEvwDpjeY10Y/YMsE:u6QFElP6n+gWMOtEvwDpjJGYQbE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-