General
-
Target
2024-04-26_a98dd53dc278e52fdeb039831d65eb27_cryptolocker
-
Size
60KB
-
Sample
240426-3fk8ysfb51
-
MD5
a98dd53dc278e52fdeb039831d65eb27
-
SHA1
e9d779837c45be26b929c2c01fcd4dd4fc33c814
-
SHA256
16007684b64dababb05b051830f5b56cf9fd464b3ab0d0b5671e1712cd6f46fa
-
SHA512
84a4f8f90d41ac67ed6f574b4036dc34d835d2f7b9d96528ebc8423dad46e9615a943f46af365316c2a6eb10b3a67d5bc5cc2a530d16c518a4f4d844180043c6
-
SSDEEP
768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5app1J71l:z6QFElP6n+gKmddpMOtEvwDpj9aYaz7f
Behavioral task
behavioral1
Sample
2024-04-26_a98dd53dc278e52fdeb039831d65eb27_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_a98dd53dc278e52fdeb039831d65eb27_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_a98dd53dc278e52fdeb039831d65eb27_cryptolocker
-
Size
60KB
-
MD5
a98dd53dc278e52fdeb039831d65eb27
-
SHA1
e9d779837c45be26b929c2c01fcd4dd4fc33c814
-
SHA256
16007684b64dababb05b051830f5b56cf9fd464b3ab0d0b5671e1712cd6f46fa
-
SHA512
84a4f8f90d41ac67ed6f574b4036dc34d835d2f7b9d96528ebc8423dad46e9615a943f46af365316c2a6eb10b3a67d5bc5cc2a530d16c518a4f4d844180043c6
-
SSDEEP
768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5app1J71l:z6QFElP6n+gKmddpMOtEvwDpj9aYaz7f
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-