Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker
-
Size
36KB
-
Sample
240204-az8jdafghp
-
MD5
ee7845b37f8d3169f978cb968a4a74a6
-
SHA1
2ef1ab22b799b1d8ac7f3434d93a0c30735ebb25
-
SHA256
75dee1835cbd30d95936dd46adab04043acab4cdb681ac002dcfed2f338201f0
-
SHA512
15de7d2096d484d1735b9c49caddb189b43fc3d1bfd337e1d935c7c88791145c1e5f6b43005afd114e605cf93d26d35b67a813da68a607de84a0da01c425533a
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbiF:bAvJCYOOvbRPDEgXrNekd7l94i3piF
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker
-
Size
36KB
-
MD5
ee7845b37f8d3169f978cb968a4a74a6
-
SHA1
2ef1ab22b799b1d8ac7f3434d93a0c30735ebb25
-
SHA256
75dee1835cbd30d95936dd46adab04043acab4cdb681ac002dcfed2f338201f0
-
SHA512
15de7d2096d484d1735b9c49caddb189b43fc3d1bfd337e1d935c7c88791145c1e5f6b43005afd114e605cf93d26d35b67a813da68a607de84a0da01c425533a
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbiF:bAvJCYOOvbRPDEgXrNekd7l94i3piF
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-