General
-
Target
2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker
-
Size
91KB
-
Sample
240603-kek8fsad85
-
MD5
9328bca4eb68f7547a65bc54c66f73b2
-
SHA1
29e3d42d937f6257ba3fc6a54003af8a2070bf61
-
SHA256
bab64d278499761f56db5172e769b3532c8f1a2ccd486b73fda30c1a144bab81
-
SHA512
87575a0d4778f4cce8f364817a07b35e93c7e984f052a1677191bd42a4b560f406502020d7c87c5988da14320d2bf8671bc7a51d28bc09e5b5e7eab81e9913a8
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyE:n6a+1SEOtEvwDpjYYvQd2PF
Behavioral task
behavioral1
Sample
2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-03_9328bca4eb68f7547a65bc54c66f73b2_cryptolocker
-
Size
91KB
-
MD5
9328bca4eb68f7547a65bc54c66f73b2
-
SHA1
29e3d42d937f6257ba3fc6a54003af8a2070bf61
-
SHA256
bab64d278499761f56db5172e769b3532c8f1a2ccd486b73fda30c1a144bab81
-
SHA512
87575a0d4778f4cce8f364817a07b35e93c7e984f052a1677191bd42a4b560f406502020d7c87c5988da14320d2bf8671bc7a51d28bc09e5b5e7eab81e9913a8
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAyE:n6a+1SEOtEvwDpjYYvQd2PF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-