General
-
Target
2024-04-27_bcd9cf2887bdd7bec71c1c5c15593238_cryptolocker
-
Size
37KB
-
Sample
240427-ave19sfb86
-
MD5
bcd9cf2887bdd7bec71c1c5c15593238
-
SHA1
f70a9d77ad7a8bac71fa7e4e8a1fc2a6fdb4d395
-
SHA256
aadc8da4297418a3763dff49893857669f520fc04a805ae3c541fe27c6800ce2
-
SHA512
07e0ab71f701213a6a8980e11bd584bc0ca388fc95ff1c020d55d35ba9da82fbd51ae9acdce31b3cdef0e489c4e0ea75b666017ae2983e2eb0a84caf9ad154db
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYB:qDdFJy3QMOtEvwDpjjWMl7T0
Behavioral task
behavioral1
Sample
2024-04-27_bcd9cf2887bdd7bec71c1c5c15593238_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_bcd9cf2887bdd7bec71c1c5c15593238_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_bcd9cf2887bdd7bec71c1c5c15593238_cryptolocker
-
Size
37KB
-
MD5
bcd9cf2887bdd7bec71c1c5c15593238
-
SHA1
f70a9d77ad7a8bac71fa7e4e8a1fc2a6fdb4d395
-
SHA256
aadc8da4297418a3763dff49893857669f520fc04a805ae3c541fe27c6800ce2
-
SHA512
07e0ab71f701213a6a8980e11bd584bc0ca388fc95ff1c020d55d35ba9da82fbd51ae9acdce31b3cdef0e489c4e0ea75b666017ae2983e2eb0a84caf9ad154db
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYB:qDdFJy3QMOtEvwDpjjWMl7T0
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-