General
-
Target
2024-06-13_5ae32468f944dccbc12401ea6dd9aef3_cryptolocker
-
Size
41KB
-
Sample
240613-nxsl2axcqd
-
MD5
5ae32468f944dccbc12401ea6dd9aef3
-
SHA1
781c8baac95f738b00f78e83488da06ce07c80b0
-
SHA256
b7f13a237492b7ffdef1dcad49393b414d518283b26ca975ba750a8a122d2122
-
SHA512
7d0641b91a6b4d54b6a7ae180ad8ba6c22813de914c65d0b742c0244511120ce2be95d24b4bb8575e25e7c673042b4d353d8137532fc297827565426d6a42382
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYljto:qDdFJy3QMOtEvwDpjjWMl7T6xo
Behavioral task
behavioral1
Sample
2024-06-13_5ae32468f944dccbc12401ea6dd9aef3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-13_5ae32468f944dccbc12401ea6dd9aef3_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-13_5ae32468f944dccbc12401ea6dd9aef3_cryptolocker
-
Size
41KB
-
MD5
5ae32468f944dccbc12401ea6dd9aef3
-
SHA1
781c8baac95f738b00f78e83488da06ce07c80b0
-
SHA256
b7f13a237492b7ffdef1dcad49393b414d518283b26ca975ba750a8a122d2122
-
SHA512
7d0641b91a6b4d54b6a7ae180ad8ba6c22813de914c65d0b742c0244511120ce2be95d24b4bb8575e25e7c673042b4d353d8137532fc297827565426d6a42382
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYljto:qDdFJy3QMOtEvwDpjjWMl7T6xo
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-