Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-19_b4dffb050cc6ff97fbc72e618fa70ad7_cryptolocker
-
Size
62KB
-
Sample
240219-n11rtach91
-
MD5
b4dffb050cc6ff97fbc72e618fa70ad7
-
SHA1
b8dd7c4d366656a34eff0e5de76e4053d223f74b
-
SHA256
f8a26bd30ddb718dba4716263737a16bf05759fc8c7b821144d6fd544851d852
-
SHA512
02d598b8feb3e7debc65515f9bab61919fe65391cae82fb97dc2e3a913ab4fe75608983c3c5b6f056421865e42ccd45c9bf14528485ff39414c75a5f54d5ba92
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mnVG:zj+soPSMOtEvwDpj4kpmeLmng
Behavioral task
behavioral1
Sample
2024-02-19_b4dffb050cc6ff97fbc72e618fa70ad7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-19_b4dffb050cc6ff97fbc72e618fa70ad7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-19_b4dffb050cc6ff97fbc72e618fa70ad7_cryptolocker
-
Size
62KB
-
MD5
b4dffb050cc6ff97fbc72e618fa70ad7
-
SHA1
b8dd7c4d366656a34eff0e5de76e4053d223f74b
-
SHA256
f8a26bd30ddb718dba4716263737a16bf05759fc8c7b821144d6fd544851d852
-
SHA512
02d598b8feb3e7debc65515f9bab61919fe65391cae82fb97dc2e3a913ab4fe75608983c3c5b6f056421865e42ccd45c9bf14528485ff39414c75a5f54d5ba92
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mnVG:zj+soPSMOtEvwDpj4kpmeLmng
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-