General
- Target 2024-05-30_59a1fc39b8bfb92945dc47812377bc47_cryptolocker
- Size 65KB
- Sample240530-ederdsed48
- SHA256 d681a92a53fad13666699c7b4f4289a8789051ca0dd16d2b259df3dafa24fdad
- MD5 59a1fc39b8bfb92945dc47812377bc47
- SHA1 9eacfb1e59c6a735be1bba3c5f21fb9a5a794c24
- SHA512 306d14dcd73cdd01bde97a86957216a39050c7ed601c5e36659e36999393fd0e75a6ebed99d0eff10b0d0b5d42eddc7c3c7728d62970b6cc696c6378b66da939
- SSDEEP 1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiq:BbdDmjr+OtEvwDpjM83
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-05-30_59a1fc39b8bfb92945dc47812377bc47_cryptolocker.exe
Resource
win7-20240508-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-30_59a1fc39b8bfb92945dc47812377bc47_cryptolocker.exe
Resource
win10v2004-20240426-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-05-30_59a1fc39b8bfb92945dc47812377bc47_cryptolocker
- Size 65KB
- SHA256 d681a92a53fad13666699c7b4f4289a8789051ca0dd16d2b259df3dafa24fdad
- MD5 59a1fc39b8bfb92945dc47812377bc47
- SHA1 9eacfb1e59c6a735be1bba3c5f21fb9a5a794c24
- SHA512 306d14dcd73cdd01bde97a86957216a39050c7ed601c5e36659e36999393fd0e75a6ebed99d0eff10b0d0b5d42eddc7c3c7728d62970b6cc696c6378b66da939
- SSDEEP 1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiq:BbdDmjr+OtEvwDpjM83
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL