General
- Target 2024-06-13_2d1fb1ce5f88718b1f8507d2a4d8e1fa_cryptolocker
- Size 73KB
- Sample240613-e15w4axfrr
- SHA256 4d3c424d38bf25a8660768e397bfc9ce5968d7f7fc6802a62f94199c157c83ea
- MD5 2d1fb1ce5f88718b1f8507d2a4d8e1fa
- SHA1 ab47edea897365b193b04681d0990b38899f221d
- SHA512 f392a312819b6dc46b142298180b4c0ca1911a97b4897a0f0f9c90d5e3f083f432bd59ac448bebb89b50bcfc6d5a91c6940f9b5f659b9f81a2007e56fadecce0
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs973y:C4Q2c94OtEvwDpj4H8zb
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-13_2d1fb1ce5f88718b1f8507d2a4d8e1fa_cryptolocker.exe
Resource
win7-20240220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_2d1fb1ce5f88718b1f8507d2a4d8e1fa_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_2d1fb1ce5f88718b1f8507d2a4d8e1fa_cryptolocker
- Size 73KB
- SHA256 4d3c424d38bf25a8660768e397bfc9ce5968d7f7fc6802a62f94199c157c83ea
- MD5 2d1fb1ce5f88718b1f8507d2a4d8e1fa
- SHA1 ab47edea897365b193b04681d0990b38899f221d
- SHA512 f392a312819b6dc46b142298180b4c0ca1911a97b4897a0f0f9c90d5e3f083f432bd59ac448bebb89b50bcfc6d5a91c6940f9b5f659b9f81a2007e56fadecce0
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs973y:C4Q2c94OtEvwDpj4H8zb
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL