General
-
Target
2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker
-
Size
40KB
-
Sample
240610-fc3x9sch65
-
MD5
5d3ff74f8d1d4da5e97d2d86c5bb9e3f
-
SHA1
dea2d199719ab4b77a6551d297b6815423ba24d1
-
SHA256
c90f702988a406ed7834f87f73d23e5bfe4c365c564c20c0fbaadbcb906c8dd1
-
SHA512
43f5554dd02559306703c22e8c4dbdad2a10f8bbb3f868ff9b82e0013966aac23b7d84212629b293441bdf511657c6a95aca58104b7a8284519335dd537b8802
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUqz:qDdFJy3QMOtEvwDpjjWMl7TdaUqz
Behavioral task
behavioral1
Sample
2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-10_5d3ff74f8d1d4da5e97d2d86c5bb9e3f_cryptolocker
-
Size
40KB
-
MD5
5d3ff74f8d1d4da5e97d2d86c5bb9e3f
-
SHA1
dea2d199719ab4b77a6551d297b6815423ba24d1
-
SHA256
c90f702988a406ed7834f87f73d23e5bfe4c365c564c20c0fbaadbcb906c8dd1
-
SHA512
43f5554dd02559306703c22e8c4dbdad2a10f8bbb3f868ff9b82e0013966aac23b7d84212629b293441bdf511657c6a95aca58104b7a8284519335dd537b8802
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYaaUqz:qDdFJy3QMOtEvwDpjjWMl7TdaUqz
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-