General
-
Target
2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker
-
Size
64KB
-
Sample
240521-x5cp8afh33
-
MD5
2a8266c5251598d14a57dad9a69d5dee
-
SHA1
69b63824244c26d5834843ac93f6187a8ea16775
-
SHA256
030265b0ed84d026b8f62d77d83a15df60c1af08fd98674a2888733f1ca4d126
-
SHA512
1762d2a703f42718541a8e4a3cae4f9ddd04c3dd6c04e58f1a9bfe7fb36e7177f1987f041f8279306da84a78ee274cbfe5e9d6417414fa9a37e2ed6bab925d83
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiQ:BbdDmjr+OtEvwDpjM8p
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-21_2a8266c5251598d14a57dad9a69d5dee_cryptolocker
-
Size
64KB
-
MD5
2a8266c5251598d14a57dad9a69d5dee
-
SHA1
69b63824244c26d5834843ac93f6187a8ea16775
-
SHA256
030265b0ed84d026b8f62d77d83a15df60c1af08fd98674a2888733f1ca4d126
-
SHA512
1762d2a703f42718541a8e4a3cae4f9ddd04c3dd6c04e58f1a9bfe7fb36e7177f1987f041f8279306da84a78ee274cbfe5e9d6417414fa9a37e2ed6bab925d83
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiQ:BbdDmjr+OtEvwDpjM8p
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-