Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker
-
Size
41KB
-
Sample
240211-zhhztsbd6y
-
MD5
dc297de81b3eefe6fa9c5acff17b6391
-
SHA1
19a15523f70c948c77c8f2bc0dbcfb6670c140ae
-
SHA256
809305acca7970cecbf196a21af8a044b902608111f06ea2907c452abcecbf09
-
SHA512
7230b4cd48a2df67b8f1d33d1332b146d49c24616770eadc047de88694ea2ca45eba3c24dc7352640c3961e50ff75161decdc158ef9ca64391da3e3d314f2814
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGT:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker
-
Size
41KB
-
MD5
dc297de81b3eefe6fa9c5acff17b6391
-
SHA1
19a15523f70c948c77c8f2bc0dbcfb6670c140ae
-
SHA256
809305acca7970cecbf196a21af8a044b902608111f06ea2907c452abcecbf09
-
SHA512
7230b4cd48a2df67b8f1d33d1332b146d49c24616770eadc047de88694ea2ca45eba3c24dc7352640c3961e50ff75161decdc158ef9ca64391da3e3d314f2814
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGT:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-