Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-22_2e1676073d2b3d48b9c2e377da06150c_cryptolocker
-
Size
63KB
-
Sample
240222-v3jpmsde27
-
MD5
2e1676073d2b3d48b9c2e377da06150c
-
SHA1
89f7e5602f105bd52f576160e9dda4a91a434c7f
-
SHA256
d6a953ab1adda8c2612fcf11ee58761e4922ed3eb46c4ff289667446f1cae3c3
-
SHA512
c57da8574ce278a86580d0036ecd0905069efbde11686c31a4b888f91a0e50aab11d207444901da47e01212be59271b6c3c7e9252b3d6676afa4e7d8da959314
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5K7B:zj+soPSMOtEvwDpj4kpmeLmi
Behavioral task
behavioral1
Sample
2024-02-22_2e1676073d2b3d48b9c2e377da06150c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-22_2e1676073d2b3d48b9c2e377da06150c_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_2e1676073d2b3d48b9c2e377da06150c_cryptolocker
-
Size
63KB
-
MD5
2e1676073d2b3d48b9c2e377da06150c
-
SHA1
89f7e5602f105bd52f576160e9dda4a91a434c7f
-
SHA256
d6a953ab1adda8c2612fcf11ee58761e4922ed3eb46c4ff289667446f1cae3c3
-
SHA512
c57da8574ce278a86580d0036ecd0905069efbde11686c31a4b888f91a0e50aab11d207444901da47e01212be59271b6c3c7e9252b3d6676afa4e7d8da959314
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5K7B:zj+soPSMOtEvwDpj4kpmeLmi
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-