General
-
Target
2024-06-02_13263a9d6190929ad626d841b0c52af1_cryptolocker
-
Size
39KB
-
Sample
240602-f1847ach44
-
MD5
13263a9d6190929ad626d841b0c52af1
-
SHA1
44932701dd37bb7d28c64f867cbce8f5c3e02004
-
SHA256
6c348f86b1899fdfa2146deb2523432baf033f0656f08bf83f31f036d2db5762
-
SHA512
b25249757e23b910a593cc72462cfb6aae904bf3e51285792aed7090d4b569cb591a8f774b31387a308ef4ade6b4d2bcc94f0ff553cf3f53ad3fd984ca11d206
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabD/R:qDdFJy3QMOtEvwDpjjWMl7Tdx
Behavioral task
behavioral1
Sample
2024-06-02_13263a9d6190929ad626d841b0c52af1_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-02_13263a9d6190929ad626d841b0c52af1_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-02_13263a9d6190929ad626d841b0c52af1_cryptolocker
-
Size
39KB
-
MD5
13263a9d6190929ad626d841b0c52af1
-
SHA1
44932701dd37bb7d28c64f867cbce8f5c3e02004
-
SHA256
6c348f86b1899fdfa2146deb2523432baf033f0656f08bf83f31f036d2db5762
-
SHA512
b25249757e23b910a593cc72462cfb6aae904bf3e51285792aed7090d4b569cb591a8f774b31387a308ef4ade6b4d2bcc94f0ff553cf3f53ad3fd984ca11d206
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabD/R:qDdFJy3QMOtEvwDpjjWMl7Tdx
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-