Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker
-
Size
45KB
-
Sample
240123-wmcf3aefd6
-
MD5
fb9a211fba7bc7364a5e0ccd24fcb7eb
-
SHA1
2b7541a8b032fd38453bf36c898cf28642cbe4ba
-
SHA256
59cb7eb2f2d68a5ec665671969c3315a0af8cabee4032ceccf0db5e28e4782c6
-
SHA512
42aa7c2c11ef32a0941873561d0e5b3fd1562e1a2b104b3e88c22a3027a5690b898ca0f441fe555d4d42d6f211dedf7c10ab79c4b7e6f97e19e4b384172cd47d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dE+:bgGYcA/53GAA6y37Q6dJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker
-
Size
45KB
-
MD5
fb9a211fba7bc7364a5e0ccd24fcb7eb
-
SHA1
2b7541a8b032fd38453bf36c898cf28642cbe4ba
-
SHA256
59cb7eb2f2d68a5ec665671969c3315a0af8cabee4032ceccf0db5e28e4782c6
-
SHA512
42aa7c2c11ef32a0941873561d0e5b3fd1562e1a2b104b3e88c22a3027a5690b898ca0f441fe555d4d42d6f211dedf7c10ab79c4b7e6f97e19e4b384172cd47d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dE+:bgGYcA/53GAA6y37Q6dJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-