Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_241a6d68091d2325dffab935869ed622_cryptolocker
-
Size
31KB
-
Sample
240221-pzl3psfd2x
-
MD5
241a6d68091d2325dffab935869ed622
-
SHA1
5298f146eca20e890db59b114ca0034d7fe24d48
-
SHA256
069d653a02ae5d5b793d5b652d6cf8160d0eb22ea9531a1be2c9a3f463ce8517
-
SHA512
3dbf1f33098411bb5e4fc94982d9c4b8e1ce2b6c6f96403b6f8d80ea6f6ed37168138a93dff0c7cf0612a24adb018a951066f578d8c210a1788fdbc806b73394
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm77J:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XS
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_241a6d68091d2325dffab935869ed622_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-21_241a6d68091d2325dffab935869ed622_cryptolocker.exe
Resource
win10v2004-20240220-en
Malware Config
Targets
-
-
Target
2024-02-21_241a6d68091d2325dffab935869ed622_cryptolocker
-
Size
31KB
-
MD5
241a6d68091d2325dffab935869ed622
-
SHA1
5298f146eca20e890db59b114ca0034d7fe24d48
-
SHA256
069d653a02ae5d5b793d5b652d6cf8160d0eb22ea9531a1be2c9a3f463ce8517
-
SHA512
3dbf1f33098411bb5e4fc94982d9c4b8e1ce2b6c6f96403b6f8d80ea6f6ed37168138a93dff0c7cf0612a24adb018a951066f578d8c210a1788fdbc806b73394
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm77J:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XS
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-