General
-
Target
2024-02-12_8dce09cf6130ccb84e7601f2d313b54b_cryptolocker
-
Size
117KB
-
Sample
240212-x4vveacg77
-
MD5
8dce09cf6130ccb84e7601f2d313b54b
-
SHA1
d299a83a1052e087a4fe4af039aa45ea02a48a4a
-
SHA256
e980ced23abd17baf84e4fc69618215acd930805fc85019193bfe56142116a1b
-
SHA512
498899c0b9c6148e67eaaab5ebb65a03678191dad642a00b31eda196f1e0752f554df732d419369c4c0d738550a9ed012460b8a637fb4c0920002d06af1f73d5
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01y:z6a+CdOOtEvwDpjczk
Behavioral task
behavioral1
Sample
2024-02-12_8dce09cf6130ccb84e7601f2d313b54b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_8dce09cf6130ccb84e7601f2d313b54b_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_8dce09cf6130ccb84e7601f2d313b54b_cryptolocker
-
Size
117KB
-
MD5
8dce09cf6130ccb84e7601f2d313b54b
-
SHA1
d299a83a1052e087a4fe4af039aa45ea02a48a4a
-
SHA256
e980ced23abd17baf84e4fc69618215acd930805fc85019193bfe56142116a1b
-
SHA512
498899c0b9c6148e67eaaab5ebb65a03678191dad642a00b31eda196f1e0752f554df732d419369c4c0d738550a9ed012460b8a637fb4c0920002d06af1f73d5
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01y:z6a+CdOOtEvwDpjczk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-