General
-
Target
2024-02-12_2b9317ce1ff64ac9e92a035733c1b2a5_cryptolocker
-
Size
85KB
-
Sample
240212-yrhvrabd5v
-
MD5
2b9317ce1ff64ac9e92a035733c1b2a5
-
SHA1
844ced38c37023fb7243e35c72062c3d41b5ef87
-
SHA256
45404abe43696c3f8e93cad1bcb2ab476ef4c71473fd6ba0b05e6407d9c47d44
-
SHA512
0f3d2ba45a48d4133b9431dd8a038cc49f3ab27b22dea716d1dcba76669da757a30a8f513590cb1580b9c3ae3fb5a6cc855387bab2ebfc0b77ddba44605cd82e
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJWV:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgB
Behavioral task
behavioral1
Sample
2024-02-12_2b9317ce1ff64ac9e92a035733c1b2a5_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_2b9317ce1ff64ac9e92a035733c1b2a5_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-12_2b9317ce1ff64ac9e92a035733c1b2a5_cryptolocker
-
Size
85KB
-
MD5
2b9317ce1ff64ac9e92a035733c1b2a5
-
SHA1
844ced38c37023fb7243e35c72062c3d41b5ef87
-
SHA256
45404abe43696c3f8e93cad1bcb2ab476ef4c71473fd6ba0b05e6407d9c47d44
-
SHA512
0f3d2ba45a48d4133b9431dd8a038cc49f3ab27b22dea716d1dcba76669da757a30a8f513590cb1580b9c3ae3fb5a6cc855387bab2ebfc0b77ddba44605cd82e
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIJWV:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-