General
- Target 2024-06-08_0d38f956071fa2676ee32a96df3f7998_cryptolocker
- Size 91KB
- Sample240608-plr2ssbf2x
- SHA256 a5c20adbec63b35d001324ff4b1072cc29a7058d4c9aa235f2a6affb56bcc234
- MD5 0d38f956071fa2676ee32a96df3f7998
- SHA1 23593b89618bdfb00badc35419d96a0692b2fa2d
- SHA512 6988f34d07b33b0e1b247dbba60c2cefebdb20442f1c6b4cf1357d16235138fd5d210b5d117d8fa57554d145f1d19798fbd771bd6934f7b74de4feef5de5388b
- SSDEEP 1536:f6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAe+:f6a+1SEOtEvwDpjYYvQd2P3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-08_0d38f956071fa2676ee32a96df3f7998_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-08_0d38f956071fa2676ee32a96df3f7998_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-08_0d38f956071fa2676ee32a96df3f7998_cryptolocker
- Size 91KB
- SHA256 a5c20adbec63b35d001324ff4b1072cc29a7058d4c9aa235f2a6affb56bcc234
- MD5 0d38f956071fa2676ee32a96df3f7998
- SHA1 23593b89618bdfb00badc35419d96a0692b2fa2d
- SHA512 6988f34d07b33b0e1b247dbba60c2cefebdb20442f1c6b4cf1357d16235138fd5d210b5d117d8fa57554d145f1d19798fbd771bd6934f7b74de4feef5de5388b
- SSDEEP 1536:f6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAe+:f6a+1SEOtEvwDpjYYvQd2P3
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL