General
- Target 2024-06-13_5ff17bde5aaf1857c14b72b3c4c4d4f7_cryptolocker
- Size 40KB
- Sample240613-e3cckaxglj
- SHA256 1fbdd696fecb1e17794df3a1c5110a50f37ddea501daf80bd7d6d2af00e081f1
- MD5 5ff17bde5aaf1857c14b72b3c4c4d4f7
- SHA1 4b877c619a8803aa0e8716d824a38dfd54aea0ac
- SHA512 2388746e65921dd50377698d691f30cf6e0fc0d9ffe4f20bd5bf0c0087d254bafedc7505c774274e465d20a3bb45d12db413c2fab04d34cfff2589638667f2f6
- SSDEEP 768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDb2a:qDdFJy3QMOtEvwDpjjWMl7Td/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-13_5ff17bde5aaf1857c14b72b3c4c4d4f7_cryptolocker.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_5ff17bde5aaf1857c14b72b3c4c4d4f7_cryptolocker.exe
Resource
win10v2004-20240508-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_5ff17bde5aaf1857c14b72b3c4c4d4f7_cryptolocker
- Size 40KB
- SHA256 1fbdd696fecb1e17794df3a1c5110a50f37ddea501daf80bd7d6d2af00e081f1
- MD5 5ff17bde5aaf1857c14b72b3c4c4d4f7
- SHA1 4b877c619a8803aa0e8716d824a38dfd54aea0ac
- SHA512 2388746e65921dd50377698d691f30cf6e0fc0d9ffe4f20bd5bf0c0087d254bafedc7505c774274e465d20a3bb45d12db413c2fab04d34cfff2589638667f2f6
- SSDEEP 768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYabDb2a:qDdFJy3QMOtEvwDpjjWMl7Td/
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL