General
- Target 2024-06-10_86eaf4f63b24c3ec5bb8a640913b4fb7_cryptolocker
- Size 43KB
- Sample240610-ferm1sch96
- SHA256 bbd95e88ed26c8eaa0ca1b81646e5b6ca9df9753daff9c8298362889543149ca
- MD5 86eaf4f63b24c3ec5bb8a640913b4fb7
- SHA1 4b443f25360371b5dd6866dd46e0dd3478904101
- SHA512 8f8c5eb85bf890bcce6aeca30a8f8db49d88e45b00ce1296d242019cc6c42945f6bf16676a4006fb9dc475078d6772c1f4e1eca018b9341118de2149000a3418
- SSDEEP 768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aga:6j+1NMOtEvwDpjrRta
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2024-06-10_86eaf4f63b24c3ec5bb8a640913b4fb7_cryptolocker.exe
Resource
win7-20240419-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-10_86eaf4f63b24c3ec5bb8a640913b4fb7_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-10_86eaf4f63b24c3ec5bb8a640913b4fb7_cryptolocker
- Size 43KB
- SHA256 bbd95e88ed26c8eaa0ca1b81646e5b6ca9df9753daff9c8298362889543149ca
- MD5 86eaf4f63b24c3ec5bb8a640913b4fb7
- SHA1 4b443f25360371b5dd6866dd46e0dd3478904101
- SHA512 8f8c5eb85bf890bcce6aeca30a8f8db49d88e45b00ce1296d242019cc6c42945f6bf16676a4006fb9dc475078d6772c1f4e1eca018b9341118de2149000a3418
- SSDEEP 768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aga:6j+1NMOtEvwDpjrRta
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Detects executables built or packed with MPress PE compressor
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL