General
- Target 2024-06-13_2399b60f99dcf1bf3518646106ff216d_cryptolocker
- Size 54KB
- Sample240613-e1q3yatgnh
- SHA256 4cf2d5f3a630a5db91d6d04a28e5aa48e110cd5a84a9b75d5a48f304dc07e3f7
- MD5 2399b60f99dcf1bf3518646106ff216d
- SHA1 0aa8b4e3274e23c328fafd44dfe44e117249a200
- SHA512 3cddc8a0317ae847041c3d73defc872981c4f084b36eb766c10613dcb4664f748dbc6e240483178a6d72e5c2e5dd6e41ec2d80e9807c9b6382a7b3b96d651714
- SSDEEP 768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkaB:z6QFElP6n+gKmddpMOtEvwDpj31ikC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-13_2399b60f99dcf1bf3518646106ff216d_cryptolocker.exe
Resource
win7-20240508-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_2399b60f99dcf1bf3518646106ff216d_cryptolocker.exe
Resource
win10v2004-20240611-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_2399b60f99dcf1bf3518646106ff216d_cryptolocker
- Size 54KB
- SHA256 4cf2d5f3a630a5db91d6d04a28e5aa48e110cd5a84a9b75d5a48f304dc07e3f7
- MD5 2399b60f99dcf1bf3518646106ff216d
- SHA1 0aa8b4e3274e23c328fafd44dfe44e117249a200
- SHA512 3cddc8a0317ae847041c3d73defc872981c4f084b36eb766c10613dcb4664f748dbc6e240483178a6d72e5c2e5dd6e41ec2d80e9807c9b6382a7b3b96d651714
- SSDEEP 768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOkaB:z6QFElP6n+gKmddpMOtEvwDpj31ikC
- MD5 SHA1 SHA512 SSDEEP
Score9/10Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL