General
- Target 2024-06-07_2f7ce0bf11827f1085c77d2d3d4dd11d_cryptolocker
- Size 54KB
- Sample240607-stq19abd52
- SHA256 43e5219b8c72b30fbf2c050fa09f4e21b00ef24fd2e97a8bacc584c30d5a9e5f
- MD5 2f7ce0bf11827f1085c77d2d3d4dd11d
- SHA1 414aa40c22e6a03519164425e9b060ff90796b19
- SHA512 a7918402345485784789777e26b57647f67446a09be1b97db2bcc11ac8db56e9b1d4bb9c8e83a5c75cfb11f2d85f33f9d293eb97be1018094348d172ead3036f
- SSDEEP 768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkgU:z6QFElP6n+gKmddpMOtEvwDpj31ikgU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-07_2f7ce0bf11827f1085c77d2d3d4dd11d_cryptolocker.exe
Resource
win7-20231129-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-07_2f7ce0bf11827f1085c77d2d3d4dd11d_cryptolocker.exe
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-07_2f7ce0bf11827f1085c77d2d3d4dd11d_cryptolocker
- Size 54KB
- SHA256 43e5219b8c72b30fbf2c050fa09f4e21b00ef24fd2e97a8bacc584c30d5a9e5f
- MD5 2f7ce0bf11827f1085c77d2d3d4dd11d
- SHA1 414aa40c22e6a03519164425e9b060ff90796b19
- SHA512 a7918402345485784789777e26b57647f67446a09be1b97db2bcc11ac8db56e9b1d4bb9c8e83a5c75cfb11f2d85f33f9d293eb97be1018094348d172ead3036f
- SSDEEP 768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkgU:z6QFElP6n+gKmddpMOtEvwDpj31ikgU
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL