General
-
Target
2024-06-13_2f5a0116d7f13cc25b50e89415f783f1_cryptolocker
-
Size
34KB
-
Sample
240613-d1ngdawepn
-
MD5
2f5a0116d7f13cc25b50e89415f783f1
-
SHA1
227f15a02763bab8a4eddd0ab347398baa117cd5
-
SHA256
618e06e4e6ecaa0f7101d61b40215e664f192b49cda98a12e6f39faf97d730ee
-
SHA512
a26b02394bfcef9d617d8c6a10ac783ce636829e1718cf8632489f7bea7ed12dd57085a5476c6b2e1a8b7dd35de2bdf913bd3a4499dab8c61e2c1be9a58585e5
-
SSDEEP
768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtXu:bFPmpiif/oc+vXu
Behavioral task
behavioral1
Sample
2024-06-13_2f5a0116d7f13cc25b50e89415f783f1_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-13_2f5a0116d7f13cc25b50e89415f783f1_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-13_2f5a0116d7f13cc25b50e89415f783f1_cryptolocker
-
Size
34KB
-
MD5
2f5a0116d7f13cc25b50e89415f783f1
-
SHA1
227f15a02763bab8a4eddd0ab347398baa117cd5
-
SHA256
618e06e4e6ecaa0f7101d61b40215e664f192b49cda98a12e6f39faf97d730ee
-
SHA512
a26b02394bfcef9d617d8c6a10ac783ce636829e1718cf8632489f7bea7ed12dd57085a5476c6b2e1a8b7dd35de2bdf913bd3a4499dab8c61e2c1be9a58585e5
-
SSDEEP
768:bFPm5zusFUB2preAr+Ofjg0S16avdrQFiLjJvtXu:bFPmpiif/oc+vXu
Score9/10-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-