Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-03_4216b81713711e9d5cf9f1d0446e4054_cryptolocker
-
Size
79KB
-
Sample
240203-d3g3dagab7
-
MD5
4216b81713711e9d5cf9f1d0446e4054
-
SHA1
3ad3a2040bad4f2b89ba85b78353c97d4a6fd4a3
-
SHA256
648aec592d1e26ca344ea1f2ea2f7f97f9a2e820d7040124580b2ff78c2b14f8
-
SHA512
3939bb2b04749407cbff9cfa82b7ffc57e84bfc9cf34deb0b5e79478b51b0aec0fd7ee37e01a35557bdbc3f9830b1d3cf4045a6df45db66960be7952ea52d829
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMe:TCjsIOtEvwDpj5HE/OUHnSMs
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_4216b81713711e9d5cf9f1d0446e4054_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_4216b81713711e9d5cf9f1d0446e4054_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-03_4216b81713711e9d5cf9f1d0446e4054_cryptolocker
-
Size
79KB
-
MD5
4216b81713711e9d5cf9f1d0446e4054
-
SHA1
3ad3a2040bad4f2b89ba85b78353c97d4a6fd4a3
-
SHA256
648aec592d1e26ca344ea1f2ea2f7f97f9a2e820d7040124580b2ff78c2b14f8
-
SHA512
3939bb2b04749407cbff9cfa82b7ffc57e84bfc9cf34deb0b5e79478b51b0aec0fd7ee37e01a35557bdbc3f9830b1d3cf4045a6df45db66960be7952ea52d829
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMe:TCjsIOtEvwDpj5HE/OUHnSMs
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-