Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-19_24d2650366714789a1d47e4a18b321eb_cryptolocker
-
Size
38KB
-
Sample
240119-prcjaseeh2
-
MD5
24d2650366714789a1d47e4a18b321eb
-
SHA1
dcf40b01d91996a0d5b48062d585c4491824ce21
-
SHA256
36e9dca247b363b6c73df351a6eac069a3dbaca5e2c549e7710b462e1bb19754
-
SHA512
09d79b2dceb8bcb20791a9ae9ca320a46473a4331f7afe7f3152f710c3d9d17ceaa1dd75d5630f6570ef299af6a0a71e13fd58f55cf0b13eb3fcc488e010aa02
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIS:btB9g/WItCSsAGjX7e9N0hunrkK
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-19_24d2650366714789a1d47e4a18b321eb_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-19_24d2650366714789a1d47e4a18b321eb_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-19_24d2650366714789a1d47e4a18b321eb_cryptolocker
-
Size
38KB
-
MD5
24d2650366714789a1d47e4a18b321eb
-
SHA1
dcf40b01d91996a0d5b48062d585c4491824ce21
-
SHA256
36e9dca247b363b6c73df351a6eac069a3dbaca5e2c549e7710b462e1bb19754
-
SHA512
09d79b2dceb8bcb20791a9ae9ca320a46473a4331f7afe7f3152f710c3d9d17ceaa1dd75d5630f6570ef299af6a0a71e13fd58f55cf0b13eb3fcc488e010aa02
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIS:btB9g/WItCSsAGjX7e9N0hunrkK
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-