Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-12_5f140bb6017298ca701d5b1a71630794_cryptolocker
-
Size
33KB
-
Sample
240212-lrtk2aab4x
-
MD5
5f140bb6017298ca701d5b1a71630794
-
SHA1
b7500576ef9f428c8094a85450d76077f0a74be5
-
SHA256
2876473981136e0a9e3f20c051772b9481af71a87d97bdc5fab0750174a491d3
-
SHA512
a257293a72075ecd75214d0801db49d2b86b1c2bd8e8ffbe5f075a0d04e666f7f2fac848c99405dbf255fccc312382bea04c174149baaa7bc1223d2e416384bb
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8awF:bgX4zYcgTEu6QOaryfjqDDw3sCawF
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_5f140bb6017298ca701d5b1a71630794_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-12_5f140bb6017298ca701d5b1a71630794_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_5f140bb6017298ca701d5b1a71630794_cryptolocker
-
Size
33KB
-
MD5
5f140bb6017298ca701d5b1a71630794
-
SHA1
b7500576ef9f428c8094a85450d76077f0a74be5
-
SHA256
2876473981136e0a9e3f20c051772b9481af71a87d97bdc5fab0750174a491d3
-
SHA512
a257293a72075ecd75214d0801db49d2b86b1c2bd8e8ffbe5f075a0d04e666f7f2fac848c99405dbf255fccc312382bea04c174149baaa7bc1223d2e416384bb
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8awF:bgX4zYcgTEu6QOaryfjqDDw3sCawF
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-