Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-14_c403314e60ff1c2d76dffcd6feed72db_cryptolocker
-
Size
85KB
-
Sample
240214-sx6wwafd62
-
MD5
c403314e60ff1c2d76dffcd6feed72db
-
SHA1
997174c2b795217d4ba2667eaddbbe763b2f51ab
-
SHA256
d5e93a60ff3e1dffbd6d0a05b5cac1c6f46a4b906b0c18d1f57d0fd097d05b22
-
SHA512
bf2119048dd9bab0adfc4df8c64120e992a514ba231cfa46f237a49bb905683cd719a33959c8b3000301a21fe866b52a75f276176fcb84e594746e2c007acd30
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISET:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgC
Behavioral task
behavioral1
Sample
2024-02-14_c403314e60ff1c2d76dffcd6feed72db_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_c403314e60ff1c2d76dffcd6feed72db_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_c403314e60ff1c2d76dffcd6feed72db_cryptolocker
-
Size
85KB
-
MD5
c403314e60ff1c2d76dffcd6feed72db
-
SHA1
997174c2b795217d4ba2667eaddbbe763b2f51ab
-
SHA256
d5e93a60ff3e1dffbd6d0a05b5cac1c6f46a4b906b0c18d1f57d0fd097d05b22
-
SHA512
bf2119048dd9bab0adfc4df8c64120e992a514ba231cfa46f237a49bb905683cd719a33959c8b3000301a21fe866b52a75f276176fcb84e594746e2c007acd30
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtISET:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-