General
-
Target
2024-04-26_aed827496506602083af0d70b8277b17_cryptolocker
-
Size
96KB
-
Sample
240426-3ftv4afb6t
-
MD5
aed827496506602083af0d70b8277b17
-
SHA1
e4c8904daa2efe2b315637925ee2900c815c02f0
-
SHA256
c99bdebac524c8c36f47b0605fb2d5d3a4806ffe0a71d7da742b4938f44441cb
-
SHA512
ef1882cdb2860e26e6ad469118245840b64e07d2bacbebdc7ad14d0e7f465404c548f9f4d8f6c2cde5a32b20371f4af11c0655a0f4e4cddb04521f3de807d7c2
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bM:zCsanOtEvwDpjBI
Behavioral task
behavioral1
Sample
2024-04-26_aed827496506602083af0d70b8277b17_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-26_aed827496506602083af0d70b8277b17_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_aed827496506602083af0d70b8277b17_cryptolocker
-
Size
96KB
-
MD5
aed827496506602083af0d70b8277b17
-
SHA1
e4c8904daa2efe2b315637925ee2900c815c02f0
-
SHA256
c99bdebac524c8c36f47b0605fb2d5d3a4806ffe0a71d7da742b4938f44441cb
-
SHA512
ef1882cdb2860e26e6ad469118245840b64e07d2bacbebdc7ad14d0e7f465404c548f9f4d8f6c2cde5a32b20371f4af11c0655a0f4e4cddb04521f3de807d7c2
-
SSDEEP
1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/bM:zCsanOtEvwDpjBI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-