Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-28_07bf39ddbd12db87d4ca6271600e8ed8_cryptolocker
-
Size
31KB
-
Sample
240128-f2qn8scbd3
-
MD5
07bf39ddbd12db87d4ca6271600e8ed8
-
SHA1
99662bc69819f5aa581bbd6d045e1e996c260111
-
SHA256
2eae8abc62304177fbe37390a7b58f37f8672b31a2f5f0bb25c0928e68a08e54
-
SHA512
a067144e3ee5cadf1817586b29a7bf0d49c8c0473adcf793795d8e88db0a7382c3f1c07c80429ba367a64672b84e3bf32eab5df4fce3cebdf685f6faf8556af4
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+m:b7o/2n1TCraU6GD1a4Xt9h
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_07bf39ddbd12db87d4ca6271600e8ed8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_07bf39ddbd12db87d4ca6271600e8ed8_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_07bf39ddbd12db87d4ca6271600e8ed8_cryptolocker
-
Size
31KB
-
MD5
07bf39ddbd12db87d4ca6271600e8ed8
-
SHA1
99662bc69819f5aa581bbd6d045e1e996c260111
-
SHA256
2eae8abc62304177fbe37390a7b58f37f8672b31a2f5f0bb25c0928e68a08e54
-
SHA512
a067144e3ee5cadf1817586b29a7bf0d49c8c0473adcf793795d8e88db0a7382c3f1c07c80429ba367a64672b84e3bf32eab5df4fce3cebdf685f6faf8556af4
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B+m:b7o/2n1TCraU6GD1a4Xt9h
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-