General
- Target 2024-06-03_c18f1cdffa4a9fa36401f2d5ccc652d3_cryptolocker
- Size 73KB
- Sample240603-nv2f6aee79
- SHA256 dc8715ba24d5e8ebaa304c3871d1da65ad9e7f613cc5a9f299290b7fb2a16cd6
- MD5 c18f1cdffa4a9fa36401f2d5ccc652d3
- SHA1 6d00864b11f48a3f5b94bed824a61e56f8514ec9
- SHA512 9c2870a86ddcd99d3ac8737afaccf4756b2a2490c1d2aed8f5161a13ef0a2eb33542d780d6969e8ac92a3e189cff739c528568a7c01a62d3b0b8bec53ae648c0
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xr/:C4Q2c94OtEvwDpj4H8zg
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-03_c18f1cdffa4a9fa36401f2d5ccc652d3_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-03_c18f1cdffa4a9fa36401f2d5ccc652d3_cryptolocker.exe
Resource
win10v2004-20240226-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-03_c18f1cdffa4a9fa36401f2d5ccc652d3_cryptolocker
- Size 73KB
- SHA256 dc8715ba24d5e8ebaa304c3871d1da65ad9e7f613cc5a9f299290b7fb2a16cd6
- MD5 c18f1cdffa4a9fa36401f2d5ccc652d3
- SHA1 6d00864b11f48a3f5b94bed824a61e56f8514ec9
- SHA512 9c2870a86ddcd99d3ac8737afaccf4756b2a2490c1d2aed8f5161a13ef0a2eb33542d780d6969e8ac92a3e189cff739c528568a7c01a62d3b0b8bec53ae648c0
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs97xr/:C4Q2c94OtEvwDpj4H8zg
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL