General
-
Target
2024-06-10_3ab14c8b12595cb67cbeaae80b7ce350_cryptolocker
-
Size
39KB
-
Sample
240610-1svxtasbnb
-
MD5
3ab14c8b12595cb67cbeaae80b7ce350
-
SHA1
271e3cde129f2895889ad45ca4ae2daf6eec707f
-
SHA256
aef91f1353bad4668398240f834efaf398f78470aae457cf40652a95e2492c72
-
SHA512
8d9cbec59a4c83d4dbe4942ff65035b6b74605ced77194f0bcb7e6c77f2930be7e1fccce95d6521bf53c3036f7945bc0a7695b7d5aea289ef62edded21c206f4
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDj:qDdFJy3QMOtEvwDpjjWMl7Tdr
Behavioral task
behavioral1
Sample
2024-06-10_3ab14c8b12595cb67cbeaae80b7ce350_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-10_3ab14c8b12595cb67cbeaae80b7ce350_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-10_3ab14c8b12595cb67cbeaae80b7ce350_cryptolocker
-
Size
39KB
-
MD5
3ab14c8b12595cb67cbeaae80b7ce350
-
SHA1
271e3cde129f2895889ad45ca4ae2daf6eec707f
-
SHA256
aef91f1353bad4668398240f834efaf398f78470aae457cf40652a95e2492c72
-
SHA512
8d9cbec59a4c83d4dbe4942ff65035b6b74605ced77194f0bcb7e6c77f2930be7e1fccce95d6521bf53c3036f7945bc0a7695b7d5aea289ef62edded21c206f4
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDj:qDdFJy3QMOtEvwDpjjWMl7Tdr
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-