General
- Target 2024-06-12_e4eb63de14f56983b365b68199cf2c4c_cryptolocker
- Size 92KB
- Sample240612-sy76bstfpr
- SHA256 b8c87dea9554b06b87fd88d9d5f23f0dfc41368132cc2140054d75a16aa9d01d
- MD5 e4eb63de14f56983b365b68199cf2c4c
- SHA1 deab3733bf021ce1fa857a622aaeb2aa08f44892
- SHA512 8d567626d61e633a1a1b51c02f6a56c5e72fefeec40802991200015ee80375ddf63973eff54e07fda4a126c23f6e137a9507bc073e8f274510df9efee7618954
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd2r:AnBdOOtEvwDpj6z0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-12_e4eb63de14f56983b365b68199cf2c4c_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-12_e4eb63de14f56983b365b68199cf2c4c_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-12_e4eb63de14f56983b365b68199cf2c4c_cryptolocker
- Size 92KB
- SHA256 b8c87dea9554b06b87fd88d9d5f23f0dfc41368132cc2140054d75a16aa9d01d
- MD5 e4eb63de14f56983b365b68199cf2c4c
- SHA1 deab3733bf021ce1fa857a622aaeb2aa08f44892
- SHA512 8d567626d61e633a1a1b51c02f6a56c5e72fefeec40802991200015ee80375ddf63973eff54e07fda4a126c23f6e137a9507bc073e8f274510df9efee7618954
- SSDEEP 1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd2r:AnBdOOtEvwDpj6z0
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL