General
- Target 2024-06-11_a93be013d2f62e81b4e20abd304cd7d8_cryptolocker
- Size 43KB
- Sample240611-p14ddaxdjg
- SHA256 5a57a9a7fb2241b3c396d7ba86d1c9f58d5475950c93a04863a1f4b9500dbb1c
- MD5 a93be013d2f62e81b4e20abd304cd7d8
- SHA1 adee48b24b7d46357c139ccee874ca0d13fb6557
- SHA512 ad6f9bf208d0bc7af90f9a47662471f5dfd00a47d8ffeda1da21f84f7f6a7f6606fa2e92c87b0cc0cd39ff31a5d415d2598afa9dd9141855e778a85c7c22c70d
- SSDEEP 768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9L:m5nkFNMOtEvwDpjG8hgpY19L
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-11_a93be013d2f62e81b4e20abd304cd7d8_cryptolocker.exe
Resource
win7-20240215-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-11_a93be013d2f62e81b4e20abd304cd7d8_cryptolocker.exe
Resource
win10v2004-20240508-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-11_a93be013d2f62e81b4e20abd304cd7d8_cryptolocker
- Size 43KB
- SHA256 5a57a9a7fb2241b3c396d7ba86d1c9f58d5475950c93a04863a1f4b9500dbb1c
- MD5 a93be013d2f62e81b4e20abd304cd7d8
- SHA1 adee48b24b7d46357c139ccee874ca0d13fb6557
- SHA512 ad6f9bf208d0bc7af90f9a47662471f5dfd00a47d8ffeda1da21f84f7f6a7f6606fa2e92c87b0cc0cd39ff31a5d415d2598afa9dd9141855e778a85c7c22c70d
- SSDEEP 768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9L:m5nkFNMOtEvwDpjG8hgpY19L
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL