General
-
Target
2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker
-
Size
56KB
-
Sample
240527-c3qtvadc6y
-
MD5
72faecfc21b7f09a2605f851d294317b
-
SHA1
3ec3d5d8c44d632f4cd5ab710cdd65615a729a9f
-
SHA256
addb328d597626b192e0ea0dfe07918033fc881a325e3f1fa9ea87de43b585b8
-
SHA512
c27fda97b86b9874f6700a1194ba45403805841f633c6cb2048760e556d080367e179c3f8b6b3e5031e3cfb1eb3cd2e0ce96bc3d8a79abec512098ece2ce61d6
-
SSDEEP
768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYG:bP9g/xtCS3Dxx0LG
Behavioral task
behavioral1
Sample
2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-27_72faecfc21b7f09a2605f851d294317b_cryptolocker
-
Size
56KB
-
MD5
72faecfc21b7f09a2605f851d294317b
-
SHA1
3ec3d5d8c44d632f4cd5ab710cdd65615a729a9f
-
SHA256
addb328d597626b192e0ea0dfe07918033fc881a325e3f1fa9ea87de43b585b8
-
SHA512
c27fda97b86b9874f6700a1194ba45403805841f633c6cb2048760e556d080367e179c3f8b6b3e5031e3cfb1eb3cd2e0ce96bc3d8a79abec512098ece2ce61d6
-
SSDEEP
768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYG:bP9g/xtCS3Dxx0LG
Score9/10-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-