Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-17_1a5f6a47f25b2a0fd845762f58a2b2c8_cryptolocker
-
Size
34KB
-
Sample
240217-y62leaba75
-
MD5
1a5f6a47f25b2a0fd845762f58a2b2c8
-
SHA1
b3bb18a2f9c54c88143f71d9b2613678af051777
-
SHA256
6df373e963643be68009e0a7f1ebadf7ac59ca3bd67866410400cf84dec3f1c5
-
SHA512
b36df6704e103fd893fbf225ab5a725c20b4bc56f34e3819f5b8268de804a3426684c0cf0575b1795b7ddb6270e2a366ad7cbf01f66d46c1bc3dc88cbd825cd3
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lmO:bA74zYcgT/Ekd0ryfjPIunqpeNswm9O
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-17_1a5f6a47f25b2a0fd845762f58a2b2c8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-17_1a5f6a47f25b2a0fd845762f58a2b2c8_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-17_1a5f6a47f25b2a0fd845762f58a2b2c8_cryptolocker
-
Size
34KB
-
MD5
1a5f6a47f25b2a0fd845762f58a2b2c8
-
SHA1
b3bb18a2f9c54c88143f71d9b2613678af051777
-
SHA256
6df373e963643be68009e0a7f1ebadf7ac59ca3bd67866410400cf84dec3f1c5
-
SHA512
b36df6704e103fd893fbf225ab5a725c20b4bc56f34e3819f5b8268de804a3426684c0cf0575b1795b7ddb6270e2a366ad7cbf01f66d46c1bc3dc88cbd825cd3
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lmO:bA74zYcgT/Ekd0ryfjPIunqpeNswm9O
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-