Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-18_bb90ed0ec4c5175f7f9964dc821c9ea9_cryptolocker
-
Size
51KB
-
Sample
240218-pxq9msaf34
-
MD5
bb90ed0ec4c5175f7f9964dc821c9ea9
-
SHA1
12ad863191b2865319e738801e4b7b94a0e32276
-
SHA256
332382ddfa560302e5f7679f3184207275c72da6b2687ece4895839dd2e453a1
-
SHA512
014bfc39ee832e09aed590439876d4b8455758d2db95458e0da7c40ad658f0c1ac26930409f7e07ed11aea3ca46da24c8e817e881bbd5c99c41de01d1e3f043e
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRszjg:79mqyNhQMOtEvwDpjBxe8TpXRSM
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_bb90ed0ec4c5175f7f9964dc821c9ea9_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-18_bb90ed0ec4c5175f7f9964dc821c9ea9_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-18_bb90ed0ec4c5175f7f9964dc821c9ea9_cryptolocker
-
Size
51KB
-
MD5
bb90ed0ec4c5175f7f9964dc821c9ea9
-
SHA1
12ad863191b2865319e738801e4b7b94a0e32276
-
SHA256
332382ddfa560302e5f7679f3184207275c72da6b2687ece4895839dd2e453a1
-
SHA512
014bfc39ee832e09aed590439876d4b8455758d2db95458e0da7c40ad658f0c1ac26930409f7e07ed11aea3ca46da24c8e817e881bbd5c99c41de01d1e3f043e
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRszjg:79mqyNhQMOtEvwDpjBxe8TpXRSM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-