General
-
Target
2024-06-11_ca228d7ced0fb3662e418c554c1b3d6a_cryptolocker
-
Size
70KB
-
Sample
240611-a29t8axckd
-
MD5
ca228d7ced0fb3662e418c554c1b3d6a
-
SHA1
cbbf75927c153abde9a7193e0e02752e185525f9
-
SHA256
e518f2a93e64f5d1cc45717028ea193eb9060af8d9e7d33cc870498fc3de4a14
-
SHA512
dabc9a119f4571ef4b54b17457d401704037ea71dd8803f64f1b1e3d9b403763a894b269e1673c892c60cd8fcfa8ab9a7b0f93da7cf2203503b41d2cf6d71b9a
-
SSDEEP
768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pt:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAt
Behavioral task
behavioral1
Sample
2024-06-11_ca228d7ced0fb3662e418c554c1b3d6a_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-11_ca228d7ced0fb3662e418c554c1b3d6a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-11_ca228d7ced0fb3662e418c554c1b3d6a_cryptolocker
-
Size
70KB
-
MD5
ca228d7ced0fb3662e418c554c1b3d6a
-
SHA1
cbbf75927c153abde9a7193e0e02752e185525f9
-
SHA256
e518f2a93e64f5d1cc45717028ea193eb9060af8d9e7d33cc870498fc3de4a14
-
SHA512
dabc9a119f4571ef4b54b17457d401704037ea71dd8803f64f1b1e3d9b403763a894b269e1673c892c60cd8fcfa8ab9a7b0f93da7cf2203503b41d2cf6d71b9a
-
SSDEEP
768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pt:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAt
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-