Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-12_0329e6aca44d371676b3c3449f7b5736_cryptolocker
-
Size
80KB
-
Sample
240212-y5mqvsbe8t
-
MD5
0329e6aca44d371676b3c3449f7b5736
-
SHA1
ffff1b97dee7d18f9445d821f18883b2cede1b25
-
SHA256
80bbf67706915ff7adcaadb8dc2c7f090adc88f5fe2c6da01cf3814284bdcf3a
-
SHA512
49de0a8276ae3949cf13344ac12c7ea22bf873c012b2b6bc23b52a585dc3a692d0418c58f5af66bf6a4f2f679d6b219494177f952645c404e61678419d35d28b
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHuw:vCjsIOtEvwDpj5H9YvQd2R
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_0329e6aca44d371676b3c3449f7b5736_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_0329e6aca44d371676b3c3449f7b5736_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-12_0329e6aca44d371676b3c3449f7b5736_cryptolocker
-
Size
80KB
-
MD5
0329e6aca44d371676b3c3449f7b5736
-
SHA1
ffff1b97dee7d18f9445d821f18883b2cede1b25
-
SHA256
80bbf67706915ff7adcaadb8dc2c7f090adc88f5fe2c6da01cf3814284bdcf3a
-
SHA512
49de0a8276ae3949cf13344ac12c7ea22bf873c012b2b6bc23b52a585dc3a692d0418c58f5af66bf6a4f2f679d6b219494177f952645c404e61678419d35d28b
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHuw:vCjsIOtEvwDpj5H9YvQd2R
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-