General
-
Target
2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker
-
Size
39KB
-
Sample
240620-c2tt4stglh
-
MD5
73357b0180d1814bba3ada9405118984
-
SHA1
0ef2552ad71ab53fdaf1ef3d4eff63de5432f085
-
SHA256
2f0dd83ac947361bc2ff369c7eeb12843fd61ae60bc1c9cd94daaf0929f176f2
-
SHA512
f71a98129e6ad76fd95f394f56b1140294d50af195b1286556ec0de30b215a9f4d29a37c89f78d88e25e7152415832e5b8272e24a657f9fcb0f035a913bf24f4
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYZ:qDdFJy3QMOtEvwDpjjWMl7TM
Behavioral task
behavioral1
Sample
2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-20_73357b0180d1814bba3ada9405118984_cryptolocker
-
Size
39KB
-
MD5
73357b0180d1814bba3ada9405118984
-
SHA1
0ef2552ad71ab53fdaf1ef3d4eff63de5432f085
-
SHA256
2f0dd83ac947361bc2ff369c7eeb12843fd61ae60bc1c9cd94daaf0929f176f2
-
SHA512
f71a98129e6ad76fd95f394f56b1140294d50af195b1286556ec0de30b215a9f4d29a37c89f78d88e25e7152415832e5b8272e24a657f9fcb0f035a913bf24f4
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYZ:qDdFJy3QMOtEvwDpjjWMl7TM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-