Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-20_9edc7374b9e3a7772027ebd66448d8b8_cryptolocker
-
Size
37KB
-
Sample
240220-je4t5adc7y
-
MD5
9edc7374b9e3a7772027ebd66448d8b8
-
SHA1
09ced0886f4d4cad274ddecb2a5a67e37f4afbef
-
SHA256
815bc31dd18fab84b3e899bcbb14b486a2077bd301aceba000cecb14c4258a24
-
SHA512
eb8f9bd6dba5a2514f103b56a3de28cb6046c989f5ac860e45653724ded368f2d818b747b109c5417d12797cbe4d30d8904578d3c4b00397fd4ccd5c298880bd
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpzW4:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL/
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_9edc7374b9e3a7772027ebd66448d8b8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_9edc7374b9e3a7772027ebd66448d8b8_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-20_9edc7374b9e3a7772027ebd66448d8b8_cryptolocker
-
Size
37KB
-
MD5
9edc7374b9e3a7772027ebd66448d8b8
-
SHA1
09ced0886f4d4cad274ddecb2a5a67e37f4afbef
-
SHA256
815bc31dd18fab84b3e899bcbb14b486a2077bd301aceba000cecb14c4258a24
-
SHA512
eb8f9bd6dba5a2514f103b56a3de28cb6046c989f5ac860e45653724ded368f2d818b747b109c5417d12797cbe4d30d8904578d3c4b00397fd4ccd5c298880bd
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpzW4:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL/
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-