General
- Target 2024-05-29_7a1a5881d7ab860b7269cf6c707c8b05_cryptolocker
- Size 90KB
- Sample240529-pavcsaee34
- SHA256 3b5bd822403da74589b4380f3339ee4a9c8e0f94c76342a7916d8067a1dde441
- MD5 7a1a5881d7ab860b7269cf6c707c8b05
- SHA1 4459216996a03f164fb523cbffafacda5cf186b3
- SHA512 1b9ab874d59fe97561fd6bd89a37b2a68ba448d4585acc1c330f7ccc163efeba4ddf9d93b03a5eb6524ce5b890ad1f58657cd93d34da8e0417e9a2318dd15d71
- SSDEEP 1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/i:n6a+1SEOtEvwDpjYYvQd2PR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-05-29_7a1a5881d7ab860b7269cf6c707c8b05_cryptolocker.exe
Resource
win7-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-29_7a1a5881d7ab860b7269cf6c707c8b05_cryptolocker.exe
Resource
win10v2004-20240426-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-05-29_7a1a5881d7ab860b7269cf6c707c8b05_cryptolocker
- Size 90KB
- SHA256 3b5bd822403da74589b4380f3339ee4a9c8e0f94c76342a7916d8067a1dde441
- MD5 7a1a5881d7ab860b7269cf6c707c8b05
- SHA1 4459216996a03f164fb523cbffafacda5cf186b3
- SHA512 1b9ab874d59fe97561fd6bd89a37b2a68ba448d4585acc1c330f7ccc163efeba4ddf9d93b03a5eb6524ce5b890ad1f58657cd93d34da8e0417e9a2318dd15d71
- SSDEEP 1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/i:n6a+1SEOtEvwDpjYYvQd2PR
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL