Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_26afe21ab5ffa2a1d0d44967bdf7a445_cryptolocker
-
Size
126KB
-
Sample
240221-xdhgdsdd8y
-
MD5
26afe21ab5ffa2a1d0d44967bdf7a445
-
SHA1
e91d04f0db0af1dbdc03beb62c4b805a4bb6ca4c
-
SHA256
924e65377b7b65ae4e0e3a838e935973591671c13d8c74204ff0ec7b846c2fa6
-
SHA512
e00f9690ec941b04bb459fad62d2395ea499ee48401a97a57de350742ed06f458f6a8e6ee5ebb2ddacb35b7ff63f78475d07ed481b0d7c89bb517a71885c066f
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpR/zV:vCA9OtEvwDpjT
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_26afe21ab5ffa2a1d0d44967bdf7a445_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_26afe21ab5ffa2a1d0d44967bdf7a445_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_26afe21ab5ffa2a1d0d44967bdf7a445_cryptolocker
-
Size
126KB
-
MD5
26afe21ab5ffa2a1d0d44967bdf7a445
-
SHA1
e91d04f0db0af1dbdc03beb62c4b805a4bb6ca4c
-
SHA256
924e65377b7b65ae4e0e3a838e935973591671c13d8c74204ff0ec7b846c2fa6
-
SHA512
e00f9690ec941b04bb459fad62d2395ea499ee48401a97a57de350742ed06f458f6a8e6ee5ebb2ddacb35b7ff63f78475d07ed481b0d7c89bb517a71885c066f
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpR/zV:vCA9OtEvwDpjT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-