Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-24_b76748b65cfb6d82f13b84494b39053e_cryptolocker
-
Size
40KB
-
Sample
240124-x513tagebj
-
MD5
b76748b65cfb6d82f13b84494b39053e
-
SHA1
5024c7f34038abd41ea9dfea5c838243ab08cd60
-
SHA256
f7cd95fd0a0db32dc0b4677fded62ff3bf37fbddd7f1afd526b2cd4428d74f56
-
SHA512
77c3d2a35977a14dbfc8ec2151b1d48b9c1b6b6e696fa3fe8833ba62f75c486af3b128a623cda475157a49b6c6b11749984cca3dd3f1bbd69fd811ddad196b18
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8PEe:bIDOw9a0Dwo3P1ojvUSDhce
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_b76748b65cfb6d82f13b84494b39053e_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_b76748b65cfb6d82f13b84494b39053e_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_b76748b65cfb6d82f13b84494b39053e_cryptolocker
-
Size
40KB
-
MD5
b76748b65cfb6d82f13b84494b39053e
-
SHA1
5024c7f34038abd41ea9dfea5c838243ab08cd60
-
SHA256
f7cd95fd0a0db32dc0b4677fded62ff3bf37fbddd7f1afd526b2cd4428d74f56
-
SHA512
77c3d2a35977a14dbfc8ec2151b1d48b9c1b6b6e696fa3fe8833ba62f75c486af3b128a623cda475157a49b6c6b11749984cca3dd3f1bbd69fd811ddad196b18
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8PEe:bIDOw9a0Dwo3P1ojvUSDhce
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-