Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-22_471d53fe701869fedf68910e1d0db319_cryptolocker
-
Size
146KB
-
Sample
240222-v5dw6sda6t
-
MD5
471d53fe701869fedf68910e1d0db319
-
SHA1
87c5c57ebe8a20d750aad16fda26db3fd572511c
-
SHA256
d06a3c727ddcb990176927874132dcdd6143cff44695f606540cc9d7c12041b0
-
SHA512
97a955ec6820dcf1e2d79fedafc44918dafd9d0abcf968628c906a5e3ee1002884df4782ec99c45587316572ec249d13ad596682c649d84a5eee3274ec3be8f7
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPFyL:V6a+pOtEvwDpjt22a
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_471d53fe701869fedf68910e1d0db319_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_471d53fe701869fedf68910e1d0db319_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_471d53fe701869fedf68910e1d0db319_cryptolocker
-
Size
146KB
-
MD5
471d53fe701869fedf68910e1d0db319
-
SHA1
87c5c57ebe8a20d750aad16fda26db3fd572511c
-
SHA256
d06a3c727ddcb990176927874132dcdd6143cff44695f606540cc9d7c12041b0
-
SHA512
97a955ec6820dcf1e2d79fedafc44918dafd9d0abcf968628c906a5e3ee1002884df4782ec99c45587316572ec249d13ad596682c649d84a5eee3274ec3be8f7
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPFyL:V6a+pOtEvwDpjt22a
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-