General
- Target 2024-06-08_d37dd1494573198ae348f27a7efa39be_cryptolocker
- Size 96KB
- Sample240608-khmwfsbd79
- SHA256 22d50f0588fbcfab5c333dfbc9101555d941ce3e3e2da5dcd44f0398c9508afc
- MD5 d37dd1494573198ae348f27a7efa39be
- SHA1 b8ff4724e7ad18c60805d5d53382f3f89284bcae
- SHA512 6fb0a2e2c0e4575d8c251c3e833115672a9d6c7e2605d2c97c133699448e72686efcd9a0bd3a21d22f277264488bd6b2a162dd9a52fbefff524158547487f0cc
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+F:AnBdOOtEvwDpj6zK
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-08_d37dd1494573198ae348f27a7efa39be_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-08_d37dd1494573198ae348f27a7efa39be_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-08_d37dd1494573198ae348f27a7efa39be_cryptolocker
- Size 96KB
- SHA256 22d50f0588fbcfab5c333dfbc9101555d941ce3e3e2da5dcd44f0398c9508afc
- MD5 d37dd1494573198ae348f27a7efa39be
- SHA1 b8ff4724e7ad18c60805d5d53382f3f89284bcae
- SHA512 6fb0a2e2c0e4575d8c251c3e833115672a9d6c7e2605d2c97c133699448e72686efcd9a0bd3a21d22f277264488bd6b2a162dd9a52fbefff524158547487f0cc
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+F:AnBdOOtEvwDpj6zK
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL