General
- Target 2024-06-11_bc36b28eb3c555d98cd10cb4528f341d_cryptolocker
- Size 92KB
- Sample240611-le1tksseqk
- SHA256 b5b85dcf66803a5c7f4d210d755f1fee95b3f84249d2678b2e000104b24d88db
- MD5 bc36b28eb3c555d98cd10cb4528f341d
- SHA1 4a0176d2a0af086352d1f7b7c41d100632ae7aa8
- SHA512 11538bdc4aab4e4fbbffbd7efc4bdac7e2d57cdaec7cce36d74a1effd63d6cca4e0795c85f6f2ee7cead20a1146833a6e34670d271a398dc93afe8b44bf34ff8
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd9:AnBdOOtEvwDpj6zp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-11_bc36b28eb3c555d98cd10cb4528f341d_cryptolocker.exe
Resource
win7-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-11_bc36b28eb3c555d98cd10cb4528f341d_cryptolocker.exe
Resource
win10v2004-20240426-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-11_bc36b28eb3c555d98cd10cb4528f341d_cryptolocker
- Size 92KB
- SHA256 b5b85dcf66803a5c7f4d210d755f1fee95b3f84249d2678b2e000104b24d88db
- MD5 bc36b28eb3c555d98cd10cb4528f341d
- SHA1 4a0176d2a0af086352d1f7b7c41d100632ae7aa8
- SHA512 11538bdc4aab4e4fbbffbd7efc4bdac7e2d57cdaec7cce36d74a1effd63d6cca4e0795c85f6f2ee7cead20a1146833a6e34670d271a398dc93afe8b44bf34ff8
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd9:AnBdOOtEvwDpj6zp
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL