General
- Target 2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker
- Size 70KB
- Sample240611-pylesaxckb
- SHA256 c815b78e689307e5dda812fe58fe6955bceaa877a36f505bcff734372731bf14
- MD5 0571ab48a9ef7a49b0e08d8278230da1
- SHA1 05eaa9d2eb5ccfe6c26efcad34e593beef7ea67c
- SHA512 0ef5f64681715ac9adbdbd1a96643e529cda6e9f77b4b0f16673cf62f4f90dbe9850e92e66eccecd421d194ba7270eadb4a921fc12036c0e09727b17ec06893b
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dY:i5nkFGMOtEvwDpjNbwQEI8UZDe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker.exe
Resource
win7-20240220-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker.exe
Resource
win10v2004-20240426-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker
- Size 70KB
- SHA256 c815b78e689307e5dda812fe58fe6955bceaa877a36f505bcff734372731bf14
- MD5 0571ab48a9ef7a49b0e08d8278230da1
- SHA1 05eaa9d2eb5ccfe6c26efcad34e593beef7ea67c
- SHA512 0ef5f64681715ac9adbdbd1a96643e529cda6e9f77b4b0f16673cf62f4f90dbe9850e92e66eccecd421d194ba7270eadb4a921fc12036c0e09727b17ec06893b
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dY:i5nkFGMOtEvwDpjNbwQEI8UZDe
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL