Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-03_5eca3d9d2bb3bcbe6b4ce3ec98da4f78_cryptolocker
-
Size
37KB
-
Sample
240203-nlqy3afhe8
-
MD5
5eca3d9d2bb3bcbe6b4ce3ec98da4f78
-
SHA1
11ee05c7ccdd2838c02a6a15aca22c9cd62e3cd9
-
SHA256
3f6f912a288b0452ab16d06ea2a8f85ba833bf1f3ace0195770e797cb61ee0e6
-
SHA512
0e72add2f4cfa82594f9f954605b9f707366ac327bc64ab92438730a751259e03a7b19289d1b39d20370290b8f781dc9b87a14ff94b646f1e07fcac86c979050
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3Oj:bxNrC7kYo1Fxf3s06gYj
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_5eca3d9d2bb3bcbe6b4ce3ec98da4f78_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_5eca3d9d2bb3bcbe6b4ce3ec98da4f78_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-03_5eca3d9d2bb3bcbe6b4ce3ec98da4f78_cryptolocker
-
Size
37KB
-
MD5
5eca3d9d2bb3bcbe6b4ce3ec98da4f78
-
SHA1
11ee05c7ccdd2838c02a6a15aca22c9cd62e3cd9
-
SHA256
3f6f912a288b0452ab16d06ea2a8f85ba833bf1f3ace0195770e797cb61ee0e6
-
SHA512
0e72add2f4cfa82594f9f954605b9f707366ac327bc64ab92438730a751259e03a7b19289d1b39d20370290b8f781dc9b87a14ff94b646f1e07fcac86c979050
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3Oj:bxNrC7kYo1Fxf3s06gYj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-