Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-28_7d5ce2a3ea42c29393c4c52b5eed82c5_cryptolocker
-
Size
39KB
-
Sample
240128-d33dbaada4
-
MD5
7d5ce2a3ea42c29393c4c52b5eed82c5
-
SHA1
113a68984c5437efba94bfb6fe554285d665136b
-
SHA256
085b8a6962c36ef8b6244019396c7823c9daadabad3726f543f9a92e19d27313
-
SHA512
dc526a400bf09cce3c84a54b5072b4fdde6c8f1c17580942e146079010e6746b9cacef3f6ded071ba344e01a41979ab320f7207364f8ace9e98c8baf8325fc26
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKK:bIDOw9a0Dwo3P1ojvUSDhs
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_7d5ce2a3ea42c29393c4c52b5eed82c5_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-28_7d5ce2a3ea42c29393c4c52b5eed82c5_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_7d5ce2a3ea42c29393c4c52b5eed82c5_cryptolocker
-
Size
39KB
-
MD5
7d5ce2a3ea42c29393c4c52b5eed82c5
-
SHA1
113a68984c5437efba94bfb6fe554285d665136b
-
SHA256
085b8a6962c36ef8b6244019396c7823c9daadabad3726f543f9a92e19d27313
-
SHA512
dc526a400bf09cce3c84a54b5072b4fdde6c8f1c17580942e146079010e6746b9cacef3f6ded071ba344e01a41979ab320f7207364f8ace9e98c8baf8325fc26
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKK:bIDOw9a0Dwo3P1ojvUSDhs
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-