Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker
-
Size
51KB
-
Sample
240123-ylfhfagdcl
-
MD5
dc87bf83284ad9c7c89ad44949eeb0c6
-
SHA1
d0382d96c3154ae58e7c974103da6c297a4d14d5
-
SHA256
7e32fd6bed6bc14176e45afed1fc9a50705e23c4dfbe03c499712e7bd64e20d1
-
SHA512
47cf009c7f8d79b2105a7252f2e6eaccfc4b24f95699c724ae16509c3e9ebd611831b326c59c5f8ead76cb1dc171b913db012fc0e0dd1e683e46d79829c482b8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVu:bIDOw9a0DwitDZz1w
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker
-
Size
51KB
-
MD5
dc87bf83284ad9c7c89ad44949eeb0c6
-
SHA1
d0382d96c3154ae58e7c974103da6c297a4d14d5
-
SHA256
7e32fd6bed6bc14176e45afed1fc9a50705e23c4dfbe03c499712e7bd64e20d1
-
SHA512
47cf009c7f8d79b2105a7252f2e6eaccfc4b24f95699c724ae16509c3e9ebd611831b326c59c5f8ead76cb1dc171b913db012fc0e0dd1e683e46d79829c482b8
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVu:bIDOw9a0DwitDZz1w
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-