Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-17_8e62196d1aca7e4e09826908a5fce30f_cryptolocker
-
Size
52KB
-
Sample
240217-p3x95sfe59
-
MD5
8e62196d1aca7e4e09826908a5fce30f
-
SHA1
7293a76be7739f06f3f8c9dc8bfe6fffee5af1fc
-
SHA256
3d62167e92604e66374e29a836437889eab6d0ff9efced4ee444f3e742b34b71
-
SHA512
e26e48641c61fec5bf87bafe158d322172719107f9768c34182cfe2feebdf0286f2a98cb120be870ac0b7fecaa4d4f20c644a861bbe49ea9c7d80337d96ed632
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTyB:bIDOw9a0DwitDZzcTR
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_8e62196d1aca7e4e09826908a5fce30f_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_8e62196d1aca7e4e09826908a5fce30f_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-17_8e62196d1aca7e4e09826908a5fce30f_cryptolocker
-
Size
52KB
-
MD5
8e62196d1aca7e4e09826908a5fce30f
-
SHA1
7293a76be7739f06f3f8c9dc8bfe6fffee5af1fc
-
SHA256
3d62167e92604e66374e29a836437889eab6d0ff9efced4ee444f3e742b34b71
-
SHA512
e26e48641c61fec5bf87bafe158d322172719107f9768c34182cfe2feebdf0286f2a98cb120be870ac0b7fecaa4d4f20c644a861bbe49ea9c7d80337d96ed632
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTyB:bIDOw9a0DwitDZzcTR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-