General
- Target 2024-06-13_bc1dc3e8560b9b4e58d77f8c6ca28e3f_cryptolocker
- Size 73KB
- Sample240613-e6qpcsxhjp
- SHA256 14b6714af27882254411d490470d48eef08e9d2d05ba0285030e3ba7e1dda7a4
- MD5 bc1dc3e8560b9b4e58d77f8c6ca28e3f
- SHA1 8ebc0a729c76ed9c917cab84512fae7d135f3831
- SHA512 42845a8267ca241db8baeffc5404fd648e7178fe0dc524144eda48d1867417cdf9e8ed83b5d7e58e5a8c7299b514111b5e8534e186b1184039f5e4b5e1cbf603
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs973y:C4Q2c94OtEvwDpj4H8zL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-13_bc1dc3e8560b9b4e58d77f8c6ca28e3f_cryptolocker.exe
Resource
win7-20240419-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-13_bc1dc3e8560b9b4e58d77f8c6ca28e3f_cryptolocker.exe
Resource
win10v2004-20240611-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-13_bc1dc3e8560b9b4e58d77f8c6ca28e3f_cryptolocker
- Size 73KB
- SHA256 14b6714af27882254411d490470d48eef08e9d2d05ba0285030e3ba7e1dda7a4
- MD5 bc1dc3e8560b9b4e58d77f8c6ca28e3f
- SHA1 8ebc0a729c76ed9c917cab84512fae7d135f3831
- SHA512 42845a8267ca241db8baeffc5404fd648e7178fe0dc524144eda48d1867417cdf9e8ed83b5d7e58e5a8c7299b514111b5e8534e186b1184039f5e4b5e1cbf603
- SSDEEP 1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs973y:C4Q2c94OtEvwDpj4H8zL
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL