Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-19_0af0ae5e7bc0d018527c3dc1dd085d3d_cryptolocker
-
Size
47KB
-
Sample
240219-lcehkabf8x
-
MD5
0af0ae5e7bc0d018527c3dc1dd085d3d
-
SHA1
4f7c9dcb99664240a9e524f49adbf3bb0698b95e
-
SHA256
b0e46ec37603e725e7e15b56b36ab7bedd19e0927b2ca8b7c63340bf404099dd
-
SHA512
ffa131d7699b7c24484378a7ddd40bddf5df3e49fccc07628ba9de5f676a09ee07e75dbb2db71d9dd7ec62f19beae15808df8bd184a048b78ace4caa9215f855
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3wwsr0B:X6QFElP6n+gJQMOtEvwDpjBDG
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-19_0af0ae5e7bc0d018527c3dc1dd085d3d_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_0af0ae5e7bc0d018527c3dc1dd085d3d_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_0af0ae5e7bc0d018527c3dc1dd085d3d_cryptolocker
-
Size
47KB
-
MD5
0af0ae5e7bc0d018527c3dc1dd085d3d
-
SHA1
4f7c9dcb99664240a9e524f49adbf3bb0698b95e
-
SHA256
b0e46ec37603e725e7e15b56b36ab7bedd19e0927b2ca8b7c63340bf404099dd
-
SHA512
ffa131d7699b7c24484378a7ddd40bddf5df3e49fccc07628ba9de5f676a09ee07e75dbb2db71d9dd7ec62f19beae15808df8bd184a048b78ace4caa9215f855
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3wwsr0B:X6QFElP6n+gJQMOtEvwDpjBDG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-