General
-
Target
2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker
-
Size
60KB
-
Sample
240521-x5w4vsga5w
-
MD5
323f1881200878d2eaf7ba3baa0b308d
-
SHA1
41384c92dd7869a94c39ee7f799753704b0e9942
-
SHA256
0e308ca2ec460e0e5844171ea3c4e160ac429cc8b3de84187fe5e53e13e45fb6
-
SHA512
cd60f24a9ce6b5dc60d050da42b32118d3aeaf493cb83369047bba18f0caf66ef6c5caa4212919b102d1c1c1a6497094c31c536027b77bfa1fc36ab9db8e03e7
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3X:z6a+CdOOtEvwDpjQM
Behavioral task
behavioral1
Sample
2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-21_323f1881200878d2eaf7ba3baa0b308d_cryptolocker
-
Size
60KB
-
MD5
323f1881200878d2eaf7ba3baa0b308d
-
SHA1
41384c92dd7869a94c39ee7f799753704b0e9942
-
SHA256
0e308ca2ec460e0e5844171ea3c4e160ac429cc8b3de84187fe5e53e13e45fb6
-
SHA512
cd60f24a9ce6b5dc60d050da42b32118d3aeaf493cb83369047bba18f0caf66ef6c5caa4212919b102d1c1c1a6497094c31c536027b77bfa1fc36ab9db8e03e7
-
SSDEEP
1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3X:z6a+CdOOtEvwDpjQM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-