General
-
Target
2024-02-12_7dd94bb2aa9e5dcdea35b36ed92d235d_cryptolocker
-
Size
116KB
-
Sample
240212-ytnh1sdb27
-
MD5
7dd94bb2aa9e5dcdea35b36ed92d235d
-
SHA1
65e5496fd0c120e7781049f645f1991b37903e54
-
SHA256
6292df340d12698b1ef9527561fc21b1662eea4678f296329629958e3d7163e2
-
SHA512
0619e57cf120ebd8dc2905be62129ecc61b7dee0721cfec0ab4fb2d9beb576de956c53411df49005c7c1adce2eff513c4b1e10e058f6e7122353ed8c8bd737e7
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01PVg:z6a+CdOOtEvwDpjczQ
Behavioral task
behavioral1
Sample
2024-02-12_7dd94bb2aa9e5dcdea35b36ed92d235d_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_7dd94bb2aa9e5dcdea35b36ed92d235d_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_7dd94bb2aa9e5dcdea35b36ed92d235d_cryptolocker
-
Size
116KB
-
MD5
7dd94bb2aa9e5dcdea35b36ed92d235d
-
SHA1
65e5496fd0c120e7781049f645f1991b37903e54
-
SHA256
6292df340d12698b1ef9527561fc21b1662eea4678f296329629958e3d7163e2
-
SHA512
0619e57cf120ebd8dc2905be62129ecc61b7dee0721cfec0ab4fb2d9beb576de956c53411df49005c7c1adce2eff513c4b1e10e058f6e7122353ed8c8bd737e7
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01PVg:z6a+CdOOtEvwDpjczQ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-