Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-26_1f8f81d6129c5923b7a0d935befa7844_cryptolocker
-
Size
38KB
-
Sample
240126-y67sesfbdq
-
MD5
1f8f81d6129c5923b7a0d935befa7844
-
SHA1
6b7b34142fb4f9054a38acc8caca2c1d6f98f024
-
SHA256
bd7ea11316122af8bf826b2f3a719cc95289a7bb1025bab8fbb480cf5b736ef5
-
SHA512
72325c400bc3c3ab14cb3cbb9f97d4ecf07cc24d04af5d3cb192a829f38fa4f4799a165e19a048d231ecfa3c023437c7fd11bae517a32ed6370aef1bb7476eda
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8Pc:bIDOw9a0Dwo3P1ojvUSDh0
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_1f8f81d6129c5923b7a0d935befa7844_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_1f8f81d6129c5923b7a0d935befa7844_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-26_1f8f81d6129c5923b7a0d935befa7844_cryptolocker
-
Size
38KB
-
MD5
1f8f81d6129c5923b7a0d935befa7844
-
SHA1
6b7b34142fb4f9054a38acc8caca2c1d6f98f024
-
SHA256
bd7ea11316122af8bf826b2f3a719cc95289a7bb1025bab8fbb480cf5b736ef5
-
SHA512
72325c400bc3c3ab14cb3cbb9f97d4ecf07cc24d04af5d3cb192a829f38fa4f4799a165e19a048d231ecfa3c023437c7fd11bae517a32ed6370aef1bb7476eda
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8Pc:bIDOw9a0Dwo3P1ojvUSDh0
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-