Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker
-
Size
51KB
-
Sample
240204-yfvp6sbdgm
-
MD5
eb8cca154b5bbafff9eb4d1a94fd9442
-
SHA1
432e245facf7adcda631d55e6a5992eedb3d19ed
-
SHA256
b95fdc36e490064f993d433f4cd6dbec53e20b0bff8b952834e363773e3a2ce2
-
SHA512
d950e1d3efd4a47f45d772edfce44cbf4b1171fa1e8dcb2aaaecc9f417c7279f19574c653ffd77426272f4897c005c63a81d5939ed01ff51f9b93bfabc65d5d3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRs5xwj:79mqyNhQMOtEvwDpjBxe8TpXRWu
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker
-
Size
51KB
-
MD5
eb8cca154b5bbafff9eb4d1a94fd9442
-
SHA1
432e245facf7adcda631d55e6a5992eedb3d19ed
-
SHA256
b95fdc36e490064f993d433f4cd6dbec53e20b0bff8b952834e363773e3a2ce2
-
SHA512
d950e1d3efd4a47f45d772edfce44cbf4b1171fa1e8dcb2aaaecc9f417c7279f19574c653ffd77426272f4897c005c63a81d5939ed01ff51f9b93bfabc65d5d3
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRs5xwj:79mqyNhQMOtEvwDpjBxe8TpXRWu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-