Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-28_6befb33ffacce1f6f2f83600f2ca14a6_cryptolocker
-
Size
39KB
-
Sample
240128-x6rkrsabal
-
MD5
6befb33ffacce1f6f2f83600f2ca14a6
-
SHA1
2c16d37ecd9a41e7439fe10bfb6e55c5bb638521
-
SHA256
bec0939b590e22c8bbeeb741f533741d112752159322b8fb7cbbbfe4a88c02f9
-
SHA512
52c4432f537ab1e24285bc20ee6885efb95d67a127e9b72a54e6c39825b9e802fdad94e1d51ce0b2d015e8996218b1234900510c8dee63a4ad313bd1791f7970
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8PC:bIDOw9a0Dwo3P1ojvUSDhK
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_6befb33ffacce1f6f2f83600f2ca14a6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_6befb33ffacce1f6f2f83600f2ca14a6_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-28_6befb33ffacce1f6f2f83600f2ca14a6_cryptolocker
-
Size
39KB
-
MD5
6befb33ffacce1f6f2f83600f2ca14a6
-
SHA1
2c16d37ecd9a41e7439fe10bfb6e55c5bb638521
-
SHA256
bec0939b590e22c8bbeeb741f533741d112752159322b8fb7cbbbfe4a88c02f9
-
SHA512
52c4432f537ab1e24285bc20ee6885efb95d67a127e9b72a54e6c39825b9e802fdad94e1d51ce0b2d015e8996218b1234900510c8dee63a4ad313bd1791f7970
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8PC:bIDOw9a0Dwo3P1ojvUSDhK
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-