General
- Target 2024-06-06_cb7bf86ef245dda0b3b347c2eedf287f_cryptolocker
- Size 60KB
- Sample240606-1fm2fade25
- SHA256 3c4954218eac6a224125c94835bbb28cc952ef0fad93e058c55b732abff3687d
- MD5 cb7bf86ef245dda0b3b347c2eedf287f
- SHA1 64305d1f1f5a6f480f311f6bec48a98c20c17198
- SHA512 a0c9193ab3eb3f8a4d960d40609c7f717d4aee147e6a56606b9a70d5809f60c790b0005cce6ebea65c9f1810c4a4e685ca6d7052cdd5fc09bc5ef6800fda4309
- SSDEEP 768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP3qhQ:H6QFElP6n+gou9cvMOtEvwDpjCpVXhhQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-06_cb7bf86ef245dda0b3b347c2eedf287f_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-06_cb7bf86ef245dda0b3b347c2eedf287f_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-06_cb7bf86ef245dda0b3b347c2eedf287f_cryptolocker
- Size 60KB
- SHA256 3c4954218eac6a224125c94835bbb28cc952ef0fad93e058c55b732abff3687d
- MD5 cb7bf86ef245dda0b3b347c2eedf287f
- SHA1 64305d1f1f5a6f480f311f6bec48a98c20c17198
- SHA512 a0c9193ab3eb3f8a4d960d40609c7f717d4aee147e6a56606b9a70d5809f60c790b0005cce6ebea65c9f1810c4a4e685ca6d7052cdd5fc09bc5ef6800fda4309
- SSDEEP 768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP3qhQ:H6QFElP6n+gou9cvMOtEvwDpjCpVXhhQ
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL