General
-
Target
2024-05-26_8e1b4cdad58bb04511dd8d2c0f4301c8_cryptolocker
-
Size
39KB
-
Sample
240526-ef6b5aef94
-
MD5
8e1b4cdad58bb04511dd8d2c0f4301c8
-
SHA1
bed7e378a770f59e727fc1128065fae44f5a8b26
-
SHA256
b774fbf29c6f3ec38332c3be6df871def4df1a50ce26de521294522218d2f7c5
-
SHA512
3fefd41ed638aacf72b8616f2b6a88a5c6bb9973079206d9e06bf5c4501fd7741346507ebd694a811b96f4cd89a7da7231be34c31eb5726abe803dc26c745fb3
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaO82:qDdFJy3QMOtEvwDpjjWMl7TdD2
Behavioral task
behavioral1
Sample
2024-05-26_8e1b4cdad58bb04511dd8d2c0f4301c8_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-26_8e1b4cdad58bb04511dd8d2c0f4301c8_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-26_8e1b4cdad58bb04511dd8d2c0f4301c8_cryptolocker
-
Size
39KB
-
MD5
8e1b4cdad58bb04511dd8d2c0f4301c8
-
SHA1
bed7e378a770f59e727fc1128065fae44f5a8b26
-
SHA256
b774fbf29c6f3ec38332c3be6df871def4df1a50ce26de521294522218d2f7c5
-
SHA512
3fefd41ed638aacf72b8616f2b6a88a5c6bb9973079206d9e06bf5c4501fd7741346507ebd694a811b96f4cd89a7da7231be34c31eb5726abe803dc26c745fb3
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaO82:qDdFJy3QMOtEvwDpjjWMl7TdD2
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-