General
-
Target
2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker
-
Size
39KB
-
Sample
240523-bsrgysgd8y
-
MD5
3acb03055347d54be2378309fd803f1a
-
SHA1
c28a95780d0b7d0873e6da2cba8e00fdb9bd213c
-
SHA256
baa357e6b7a668181cd00fe40c4c1b6562e33861fc38bc2b3e46d09f51ab11a6
-
SHA512
a85f07e17ff1f11d763ea20c83519c3229101deb8c512568ff21990f1a3589c2e01c3ba6b48dd95c3c2d6091b2dda8a73f575253e604564b9773e352b7199a21
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX6:qDdFJy3QMOtEvwDpjjWMl7Tj
Behavioral task
behavioral1
Sample
2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_3acb03055347d54be2378309fd803f1a_cryptolocker
-
Size
39KB
-
MD5
3acb03055347d54be2378309fd803f1a
-
SHA1
c28a95780d0b7d0873e6da2cba8e00fdb9bd213c
-
SHA256
baa357e6b7a668181cd00fe40c4c1b6562e33861fc38bc2b3e46d09f51ab11a6
-
SHA512
a85f07e17ff1f11d763ea20c83519c3229101deb8c512568ff21990f1a3589c2e01c3ba6b48dd95c3c2d6091b2dda8a73f575253e604564b9773e352b7199a21
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYX6:qDdFJy3QMOtEvwDpjjWMl7Tj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-