Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-26_15ff4caaa5aab79e7b478adbfb343dba_cryptolocker
-
Size
46KB
-
Sample
240126-a23e5sbgcq
-
MD5
15ff4caaa5aab79e7b478adbfb343dba
-
SHA1
48e41479bf17d018555d0b248ca9cc682dfe3929
-
SHA256
76853f3aeea8838c29a807feb94f8ffba9bdef532b0986fae464db548b798bcf
-
SHA512
38b4267cf79c88ceef85175dfa6f94d1bad0c69c4525654f5bce374029c5d731076d9dafd7b9a294ebed2048729f9d482513fc966a25b6fa97c2641fa15e1358
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hDu:bgGYcA/53GAA6y37nby
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_15ff4caaa5aab79e7b478adbfb343dba_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_15ff4caaa5aab79e7b478adbfb343dba_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-26_15ff4caaa5aab79e7b478adbfb343dba_cryptolocker
-
Size
46KB
-
MD5
15ff4caaa5aab79e7b478adbfb343dba
-
SHA1
48e41479bf17d018555d0b248ca9cc682dfe3929
-
SHA256
76853f3aeea8838c29a807feb94f8ffba9bdef532b0986fae464db548b798bcf
-
SHA512
38b4267cf79c88ceef85175dfa6f94d1bad0c69c4525654f5bce374029c5d731076d9dafd7b9a294ebed2048729f9d482513fc966a25b6fa97c2641fa15e1358
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hDu:bgGYcA/53GAA6y37nby
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-