Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-18_8a33a713ef97774a54a367aa6e662650_cryptolocker
-
Size
32KB
-
Sample
240218-kmxlfsge38
-
MD5
8a33a713ef97774a54a367aa6e662650
-
SHA1
751502c495215762ec251fff98261107c10d09bc
-
SHA256
497342c3405f476b49a63d8466ae7dcafe8bb316d36d963566bf6cdefeed1030
-
SHA512
04cf2e059710d12b63284dc7136ae3ca736be4bee11a848125a8f3d0d6560e88282a1aaa9ebef693c3c52a428e106ace52e07d829243097031b51b65034b9cd9
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFtx:b7o/2n1TCraU6GD1a4Xt9bRwJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_8a33a713ef97774a54a367aa6e662650_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_8a33a713ef97774a54a367aa6e662650_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-18_8a33a713ef97774a54a367aa6e662650_cryptolocker
-
Size
32KB
-
MD5
8a33a713ef97774a54a367aa6e662650
-
SHA1
751502c495215762ec251fff98261107c10d09bc
-
SHA256
497342c3405f476b49a63d8466ae7dcafe8bb316d36d963566bf6cdefeed1030
-
SHA512
04cf2e059710d12b63284dc7136ae3ca736be4bee11a848125a8f3d0d6560e88282a1aaa9ebef693c3c52a428e106ace52e07d829243097031b51b65034b9cd9
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFtx:b7o/2n1TCraU6GD1a4Xt9bRwJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-