Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-18_da01eebe2cf63f41af0f45c730aca17b_cryptolocker
-
Size
42KB
-
Sample
240118-3exwcsgfh2
-
MD5
da01eebe2cf63f41af0f45c730aca17b
-
SHA1
91a2f07fb117fd433e17bccb7e4f752a861b1a76
-
SHA256
43e4d477ca4321f1d1aca355f9c582ce8a45ccd1b5202183fe0858b760ac1130
-
SHA512
4e113c52c75166c07d4f8a8d3e8fb76b6526cae740610c22f85b0c646189aa22c8fd3eb9e1c6c86b1ab81faab4afd5d5c477b512a48f712ae43a5fdb979c7f2a
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kxo:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XB
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-18_da01eebe2cf63f41af0f45c730aca17b_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_da01eebe2cf63f41af0f45c730aca17b_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-18_da01eebe2cf63f41af0f45c730aca17b_cryptolocker
-
Size
42KB
-
MD5
da01eebe2cf63f41af0f45c730aca17b
-
SHA1
91a2f07fb117fd433e17bccb7e4f752a861b1a76
-
SHA256
43e4d477ca4321f1d1aca355f9c582ce8a45ccd1b5202183fe0858b760ac1130
-
SHA512
4e113c52c75166c07d4f8a8d3e8fb76b6526cae740610c22f85b0c646189aa22c8fd3eb9e1c6c86b1ab81faab4afd5d5c477b512a48f712ae43a5fdb979c7f2a
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kxo:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-