General
- Target 2024-06-03_9d3ff0004718e2899f12166940770004_cryptolocker
- Size 67KB
- Sample240603-bm6ppaea4w
- SHA256 43401abaf500d57a77cc71042df8ec1aed9fa53bd7203da6ce3e92a2efa75457
- MD5 9d3ff0004718e2899f12166940770004
- SHA1 ada257e8c5cba825109e84760bb61cca3c12803c
- SHA512 e00add0d4aa6452cd67f5bfde8b40ff0e547f896ca05735dee865b663639ee4aaf641c9ebbd1a77ccdc07d8e37d5ac39bc21d45e9d454477ef2f7dd4c7ac8c43
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRY:1nK6a+qdOOtEvwDpjt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-03_9d3ff0004718e2899f12166940770004_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_9d3ff0004718e2899f12166940770004_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-03_9d3ff0004718e2899f12166940770004_cryptolocker
- Size 67KB
- SHA256 43401abaf500d57a77cc71042df8ec1aed9fa53bd7203da6ce3e92a2efa75457
- MD5 9d3ff0004718e2899f12166940770004
- SHA1 ada257e8c5cba825109e84760bb61cca3c12803c
- SHA512 e00add0d4aa6452cd67f5bfde8b40ff0e547f896ca05735dee865b663639ee4aaf641c9ebbd1a77ccdc07d8e37d5ac39bc21d45e9d454477ef2f7dd4c7ac8c43
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRY:1nK6a+qdOOtEvwDpjt
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL