General
- Target 2024-06-08_d86c658f22726be1197cfb284ff01227_cryptolocker
- Size 68KB
- Sample240608-k536ysbe83
- SHA256 aab76a46e578c5ff6e7e093e79e060b16de21f8f250384bf8ba99db66c4c3c30
- MD5 d86c658f22726be1197cfb284ff01227
- SHA1 2e0c24c94887dfabf2e623716af7c8e583ec2df9
- SHA512 4c66389267c299676c9c55c6d6e8931dc4d1e7283ca146eff03c20aee5aa87d9d182d01bdced7451418f2e787d0f51871e0c0216ce1aefb259747cf8f67e356f
- SSDEEP 768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIJ:6j+1NMOtEvwDpjr8ox8UDEpN/js
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2024-06-08_d86c658f22726be1197cfb284ff01227_cryptolocker.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-08_d86c658f22726be1197cfb284ff01227_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-08_d86c658f22726be1197cfb284ff01227_cryptolocker
- Size 68KB
- SHA256 aab76a46e578c5ff6e7e093e79e060b16de21f8f250384bf8ba99db66c4c3c30
- MD5 d86c658f22726be1197cfb284ff01227
- SHA1 2e0c24c94887dfabf2e623716af7c8e583ec2df9
- SHA512 4c66389267c299676c9c55c6d6e8931dc4d1e7283ca146eff03c20aee5aa87d9d182d01bdced7451418f2e787d0f51871e0c0216ce1aefb259747cf8f67e356f
- SSDEEP 768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIJ:6j+1NMOtEvwDpjr8ox8UDEpN/js
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL