Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-12_4585990c1c5df39c52142d9072967480_cryptolocker
-
Size
46KB
-
Sample
240212-atzpaafb54
-
MD5
4585990c1c5df39c52142d9072967480
-
SHA1
898e64fbd7fbf7fa3093d7ff8320edb019a641f3
-
SHA256
cd9873673ae9117ea34f6ec916e71cad46db9755e620add6dc39ffaa638a7b21
-
SHA512
855f1b83ed100a5e9748a8f31c5a34e0312fc21246c5bc58cb11176d8a617abc7cdcec19a9fcc8ec9775b561471aca6af7cd8f1725f3d2484be98ecd3ba737d5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dgl:bgGYcA/53GAA6y37Q6d+
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_4585990c1c5df39c52142d9072967480_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_4585990c1c5df39c52142d9072967480_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-12_4585990c1c5df39c52142d9072967480_cryptolocker
-
Size
46KB
-
MD5
4585990c1c5df39c52142d9072967480
-
SHA1
898e64fbd7fbf7fa3093d7ff8320edb019a641f3
-
SHA256
cd9873673ae9117ea34f6ec916e71cad46db9755e620add6dc39ffaa638a7b21
-
SHA512
855f1b83ed100a5e9748a8f31c5a34e0312fc21246c5bc58cb11176d8a617abc7cdcec19a9fcc8ec9775b561471aca6af7cd8f1725f3d2484be98ecd3ba737d5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dgl:bgGYcA/53GAA6y37Q6d+
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-