Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-04_99834b6fdcd52feef90ee120beaae3f1_cryptolocker
-
Size
59KB
-
Sample
240204-ge5qbadbbq
-
MD5
99834b6fdcd52feef90ee120beaae3f1
-
SHA1
26c825451185b5ce566b77d1f2b0b64f2ad4e04a
-
SHA256
076132b55bbfbade6e2461dc15026ddc8464a5f74581867d05c9b7e5562dab7f
-
SHA512
934e41fc038047ca6371ff67b5ad879186d61a5942f4c45ba6bfeffcdb5b62f013f3398928ef749b7361e6dccfaf264040d4ebdb99e394dfac3fcc1fac40bbc5
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3rFC0I:ZVxkGOtEvwDpjcaC
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_99834b6fdcd52feef90ee120beaae3f1_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-04_99834b6fdcd52feef90ee120beaae3f1_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-04_99834b6fdcd52feef90ee120beaae3f1_cryptolocker
-
Size
59KB
-
MD5
99834b6fdcd52feef90ee120beaae3f1
-
SHA1
26c825451185b5ce566b77d1f2b0b64f2ad4e04a
-
SHA256
076132b55bbfbade6e2461dc15026ddc8464a5f74581867d05c9b7e5562dab7f
-
SHA512
934e41fc038047ca6371ff67b5ad879186d61a5942f4c45ba6bfeffcdb5b62f013f3398928ef749b7361e6dccfaf264040d4ebdb99e394dfac3fcc1fac40bbc5
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3rFC0I:ZVxkGOtEvwDpjcaC
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-