Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-28_780d80309d8a1306c5c759994889ac95_cryptolocker
-
Size
40KB
-
Sample
240128-bzz3nsadbk
-
MD5
780d80309d8a1306c5c759994889ac95
-
SHA1
4619bbe279fad714f4a46b9591f668ad1aa63a94
-
SHA256
c46a219e1c03dd3b1a6facd2a8f1143b03b0226f05a31bdb9454e45f82319bb1
-
SHA512
be9d2384c2a6ac48eb997fe96931405846bb82d9d5e627e0dd2054e97193c2adc0859eb734debb3f9aad4855409a9c0e7723a3d68a9eace27240da4a54e5ec5a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2Md5:bgGYcA/53GADw8Clgd5
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_780d80309d8a1306c5c759994889ac95_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_780d80309d8a1306c5c759994889ac95_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_780d80309d8a1306c5c759994889ac95_cryptolocker
-
Size
40KB
-
MD5
780d80309d8a1306c5c759994889ac95
-
SHA1
4619bbe279fad714f4a46b9591f668ad1aa63a94
-
SHA256
c46a219e1c03dd3b1a6facd2a8f1143b03b0226f05a31bdb9454e45f82319bb1
-
SHA512
be9d2384c2a6ac48eb997fe96931405846bb82d9d5e627e0dd2054e97193c2adc0859eb734debb3f9aad4855409a9c0e7723a3d68a9eace27240da4a54e5ec5a
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2Md5:bgGYcA/53GADw8Clgd5
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-