General
- Target 2024-06-01_591e76dd1f35231887a39966c2148fb9_cryptolocker
- Size 69KB
- Sample240601-w3prbsba31
- SHA256 09d5aa573e53136fb60dbd62bf242901248d694afc52ab4c5105f685e7044c4f
- MD5 591e76dd1f35231887a39966c2148fb9
- SHA1 5b032aa85c8a2e3f3c5c2629e8cd896d9e8c5235
- SHA512 c1e62dec0aaed3d97081bc809e899c2d301f8ee32ae0d1cbd28f49caa88676371fffc2194f01f158ffab4a2c8e2863086e8969f3b607c41e9e83b8d0ce49d696
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dh:i5nkFGMOtEvwDpjNbwQEI8UZD7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-01_591e76dd1f35231887a39966c2148fb9_cryptolocker.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-01_591e76dd1f35231887a39966c2148fb9_cryptolocker.exe
Resource
win10v2004-20240426-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-01_591e76dd1f35231887a39966c2148fb9_cryptolocker
- Size 69KB
- SHA256 09d5aa573e53136fb60dbd62bf242901248d694afc52ab4c5105f685e7044c4f
- MD5 591e76dd1f35231887a39966c2148fb9
- SHA1 5b032aa85c8a2e3f3c5c2629e8cd896d9e8c5235
- SHA512 c1e62dec0aaed3d97081bc809e899c2d301f8ee32ae0d1cbd28f49caa88676371fffc2194f01f158ffab4a2c8e2863086e8969f3b607c41e9e83b8d0ce49d696
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dh:i5nkFGMOtEvwDpjNbwQEI8UZD7
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL