Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-19_a7c0efc668be0a226969e2a1cd67501d_cryptolocker
-
Size
64KB
-
Sample
240219-fqkc3sac56
-
MD5
a7c0efc668be0a226969e2a1cd67501d
-
SHA1
89e6e71057f93c933f54006ecc788024ffc96b9e
-
SHA256
7dafa214866f013042a388d66378f51a6182651e97b4646234d425b3e8142d23
-
SHA512
4156206d5ecbc7874801151b85c1403a99f3ffcf4f3d1eca60cdfda16f3a8179ac0c81627972557009cf2df55321645f0c6f1de80aa3be5dc9c07c5c92ede831
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA96:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_a7c0efc668be0a226969e2a1cd67501d_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_a7c0efc668be0a226969e2a1cd67501d_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_a7c0efc668be0a226969e2a1cd67501d_cryptolocker
-
Size
64KB
-
MD5
a7c0efc668be0a226969e2a1cd67501d
-
SHA1
89e6e71057f93c933f54006ecc788024ffc96b9e
-
SHA256
7dafa214866f013042a388d66378f51a6182651e97b4646234d425b3e8142d23
-
SHA512
4156206d5ecbc7874801151b85c1403a99f3ffcf4f3d1eca60cdfda16f3a8179ac0c81627972557009cf2df55321645f0c6f1de80aa3be5dc9c07c5c92ede831
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSA96:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-