Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_a85dd98bedaa71bd00afe0bdf6d49b60_cryptolocker
-
Size
125KB
-
Sample
240221-1fltdagb44
-
MD5
a85dd98bedaa71bd00afe0bdf6d49b60
-
SHA1
706327ac8ad00c4f2a36cea600f0b614d14c40c6
-
SHA256
00dee7ecf51dfc982d05a9d87fb2d8b6936c5f622f98d3b7a284f0e4fda15124
-
SHA512
506fc2d63b01dcfa5c90e0da95ebcdc75445419a2b338e3cf2398ff2c4c0bdcdc8cf2bceec4d8a6a91d3b4c149d3b5ea25b1f32ac63a27d148ba4f2f5a815405
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxn:vCA9OtEvwDpjT
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_a85dd98bedaa71bd00afe0bdf6d49b60_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_a85dd98bedaa71bd00afe0bdf6d49b60_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_a85dd98bedaa71bd00afe0bdf6d49b60_cryptolocker
-
Size
125KB
-
MD5
a85dd98bedaa71bd00afe0bdf6d49b60
-
SHA1
706327ac8ad00c4f2a36cea600f0b614d14c40c6
-
SHA256
00dee7ecf51dfc982d05a9d87fb2d8b6936c5f622f98d3b7a284f0e4fda15124
-
SHA512
506fc2d63b01dcfa5c90e0da95ebcdc75445419a2b338e3cf2398ff2c4c0bdcdc8cf2bceec4d8a6a91d3b4c149d3b5ea25b1f32ac63a27d148ba4f2f5a815405
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxn:vCA9OtEvwDpjT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-