General
- Target 2024-06-08_9d616e44180b515b9455c3b75b2d83e6_cryptolocker
- Size 39KB
- Sample240608-q6v5macb71
- SHA256 47d3627084d07b4f3c2569762b278600c8cd6cc2c67b7c675962528de0ebe95b
- MD5 9d616e44180b515b9455c3b75b2d83e6
- SHA1 5ef1324696fa9fc0769630dd83822933fb0aaeec
- SHA512 da27f1c172e192cd98e14e50dcdb0c2833adcf37410e492ea15c6df827f3765c9d82d1edcd79d78ebe4768e934cfe96a218f0b95d1a13602ba57305d7f693ae1
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38nl:qUmnpomddpMOtEvwDpjjaYaQ8l
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-08_9d616e44180b515b9455c3b75b2d83e6_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-08_9d616e44180b515b9455c3b75b2d83e6_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-08_9d616e44180b515b9455c3b75b2d83e6_cryptolocker
- Size 39KB
- SHA256 47d3627084d07b4f3c2569762b278600c8cd6cc2c67b7c675962528de0ebe95b
- MD5 9d616e44180b515b9455c3b75b2d83e6
- SHA1 5ef1324696fa9fc0769630dd83822933fb0aaeec
- SHA512 da27f1c172e192cd98e14e50dcdb0c2833adcf37410e492ea15c6df827f3765c9d82d1edcd79d78ebe4768e934cfe96a218f0b95d1a13602ba57305d7f693ae1
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK38nl:qUmnpomddpMOtEvwDpjjaYaQ8l
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL