General
- Target 2024-06-03_3118020d19f1da306816443e1861fa6f_cryptolocker
- Size 53KB
- Sample240603-nkxp8aeb24
- SHA256 faaf7d478854d36a9e4d1e38ecbf6169b2f3714d3f42121c06ff8ff9003fe433
- MD5 3118020d19f1da306816443e1861fa6f
- SHA1 bb6c5a25675220cd3a6393621192dff123275002
- SHA512 84e18c1fb194db7ef8710835dc6a79f69d655abe0859538178609f2fb4bf8f1d56095785e96643b881fbe7908bbafd18a6cef76d626c9eafae6e78bbd8f8c92a
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOz:bODOw9acifAoc+vo
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-03_3118020d19f1da306816443e1861fa6f_cryptolocker.exe
Resource
win7-20240419-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_3118020d19f1da306816443e1861fa6f_cryptolocker.exe
Resource
win10v2004-20240508-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-03_3118020d19f1da306816443e1861fa6f_cryptolocker
- Size 53KB
- SHA256 faaf7d478854d36a9e4d1e38ecbf6169b2f3714d3f42121c06ff8ff9003fe433
- MD5 3118020d19f1da306816443e1861fa6f
- SHA1 bb6c5a25675220cd3a6393621192dff123275002
- SHA512 84e18c1fb194db7ef8710835dc6a79f69d655abe0859538178609f2fb4bf8f1d56095785e96643b881fbe7908bbafd18a6cef76d626c9eafae6e78bbd8f8c92a
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOz:bODOw9acifAoc+vo
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL