General
- Target 2024-06-01_080c7a1b82d8978326a9ab0010857232_cryptolocker
- Size 39KB
- Sample240601-wz35jsbf33
- SHA256 7456ad9f09d2bbd98d6dfc2ca5d41c4b54949a9f59e9edf5d76c5443d1c3f904
- MD5 080c7a1b82d8978326a9ab0010857232
- SHA1 18f328f35450ddd173e74762be94945f57fdb5ee
- SHA512 90825a4b83b8f85be57798031758ffab9dac4f19d281f1b5604a99e29e58814b136246714f86ce3c9d2d86c30c1aa50325919701d776e2dc66938165e561269c
- SSDEEP 768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbm:qDdFJy3QMOtEvwDpjjWMl7Tdy
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-01_080c7a1b82d8978326a9ab0010857232_cryptolocker.exe
Resource
win7-20231129-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-01_080c7a1b82d8978326a9ab0010857232_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-01_080c7a1b82d8978326a9ab0010857232_cryptolocker
- Size 39KB
- SHA256 7456ad9f09d2bbd98d6dfc2ca5d41c4b54949a9f59e9edf5d76c5443d1c3f904
- MD5 080c7a1b82d8978326a9ab0010857232
- SHA1 18f328f35450ddd173e74762be94945f57fdb5ee
- SHA512 90825a4b83b8f85be57798031758ffab9dac4f19d281f1b5604a99e29e58814b136246714f86ce3c9d2d86c30c1aa50325919701d776e2dc66938165e561269c
- SSDEEP 768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDbm:qDdFJy3QMOtEvwDpjjWMl7Tdy
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL