General
-
Target
2024-04-26_ea361e5a5c0809ba1877b1e09f3cd342_cryptolocker
-
Size
52KB
-
Sample
240426-3hcplafb9y
-
MD5
ea361e5a5c0809ba1877b1e09f3cd342
-
SHA1
8b2d8bc91ce009ad59fc740a575b721a615d2e73
-
SHA256
621df9406c242723ecfcfb62ce3800edb688043c271f131a660458e57f9f2e4d
-
SHA512
5a761ba81f27cde84de049f558787fcb5c899ccc1d42142867e663f5257889fe23e60f8a15641cc2616d91247734b1af7135a99efb4638f1177c1864763f7b60
-
SSDEEP
768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOP4:z6QFElP6n+gKmddpMOtEvwDpj31iP4
Behavioral task
behavioral1
Sample
2024-04-26_ea361e5a5c0809ba1877b1e09f3cd342_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-26_ea361e5a5c0809ba1877b1e09f3cd342_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_ea361e5a5c0809ba1877b1e09f3cd342_cryptolocker
-
Size
52KB
-
MD5
ea361e5a5c0809ba1877b1e09f3cd342
-
SHA1
8b2d8bc91ce009ad59fc740a575b721a615d2e73
-
SHA256
621df9406c242723ecfcfb62ce3800edb688043c271f131a660458e57f9f2e4d
-
SHA512
5a761ba81f27cde84de049f558787fcb5c899ccc1d42142867e663f5257889fe23e60f8a15641cc2616d91247734b1af7135a99efb4638f1177c1864763f7b60
-
SSDEEP
768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOP4:z6QFElP6n+gKmddpMOtEvwDpj31iP4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-