General
-
Target
2024-05-23_79812cd4473f1692ab1dd72c07aee83b_cryptolocker
-
Size
78KB
-
Sample
240523-c1y3faag2v
-
MD5
79812cd4473f1692ab1dd72c07aee83b
-
SHA1
b04a89e3c277b9b169e8ce5dbf91b125a698bbd3
-
SHA256
c2dd730e5a16b0ee55ced6869351ad49f4a640d4ce674bf9bf82e3fff45f0eff
-
SHA512
38739ced536290583e070d2dadb584700bd6f2bb4c628269744c2e6f96afe5e06e301b1d930443c10036b66375c09b1cb0e0717563d5b0c3086f12a02279b7fb
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1Fe:T6a+rdOOtEvwDpjNtHPr
Behavioral task
behavioral1
Sample
2024-05-23_79812cd4473f1692ab1dd72c07aee83b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-23_79812cd4473f1692ab1dd72c07aee83b_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-23_79812cd4473f1692ab1dd72c07aee83b_cryptolocker
-
Size
78KB
-
MD5
79812cd4473f1692ab1dd72c07aee83b
-
SHA1
b04a89e3c277b9b169e8ce5dbf91b125a698bbd3
-
SHA256
c2dd730e5a16b0ee55ced6869351ad49f4a640d4ce674bf9bf82e3fff45f0eff
-
SHA512
38739ced536290583e070d2dadb584700bd6f2bb4c628269744c2e6f96afe5e06e301b1d930443c10036b66375c09b1cb0e0717563d5b0c3086f12a02279b7fb
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1Fe:T6a+rdOOtEvwDpjNtHPr
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-