Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker
-
Size
41KB
-
Sample
240124-bxx6asehgl
-
MD5
cfa6f4d8b1a315cfd3dcc6b92aa57cf5
-
SHA1
4e11b88266bbb7b9eee8d4fd6acdb4d7e819d679
-
SHA256
f24abadfee98370f14f30266999b90ec7cecf26a524eaf7b5fc066896f5a6fb0
-
SHA512
e13a81e3af8896704bbf6ea7188f8879ead6b256f2f0fc24a83619cc6b417c9fb7f0c102837baf7bc7142a45112a3db6718a6402ff338c2130d10bf93d241f02
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwovv:bc/y2lm6Y0AqJ51mwovv
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker
-
Size
41KB
-
MD5
cfa6f4d8b1a315cfd3dcc6b92aa57cf5
-
SHA1
4e11b88266bbb7b9eee8d4fd6acdb4d7e819d679
-
SHA256
f24abadfee98370f14f30266999b90ec7cecf26a524eaf7b5fc066896f5a6fb0
-
SHA512
e13a81e3af8896704bbf6ea7188f8879ead6b256f2f0fc24a83619cc6b417c9fb7f0c102837baf7bc7142a45112a3db6718a6402ff338c2130d10bf93d241f02
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwovv:bc/y2lm6Y0AqJ51mwovv
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-