Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker
-
Size
47KB
-
Sample
240222-w4jxgadf7x
-
MD5
4f664be5c59bf629ba44f468a701b5af
-
SHA1
b49f3f2ca564c789dc841f16552e33f46b0a1fc5
-
SHA256
e5bb36d728ce6d0cfc6bf79370df8d1f64073bcc6f80f7d5d80742175a0ebc0a
-
SHA512
0350c37203a20be8fb454993c1fda9e7d3fb16debbe19040db2157c4a752ef7d74ab91680f25a9a67eea9abdc1bfefcfc7d9e5ffd0eeeb358be06d261e3d8597
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT9F:vj+jsMQMOtEvwDpj5Hczer5ixuM7
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker
-
Size
47KB
-
MD5
4f664be5c59bf629ba44f468a701b5af
-
SHA1
b49f3f2ca564c789dc841f16552e33f46b0a1fc5
-
SHA256
e5bb36d728ce6d0cfc6bf79370df8d1f64073bcc6f80f7d5d80742175a0ebc0a
-
SHA512
0350c37203a20be8fb454993c1fda9e7d3fb16debbe19040db2157c4a752ef7d74ab91680f25a9a67eea9abdc1bfefcfc7d9e5ffd0eeeb358be06d261e3d8597
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT9F:vj+jsMQMOtEvwDpj5Hczer5ixuM7
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-