Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_7589bbb8cc53c92cf06bb52220b8aa90_cryptolocker
-
Size
39KB
-
Sample
240223-jj6jhsea73
-
MD5
7589bbb8cc53c92cf06bb52220b8aa90
-
SHA1
065e5b21efa39912a04cb8299b986acf067c2c68
-
SHA256
f0b4cbc4cceee07c0d3c6d7cb0802a5df67d9e214c4ae70ffd91f26572e38b2a
-
SHA512
97e7244752083b8e3d3b56c4aa10105377d51d45bd4af532423a804757151d8f9707638fcca49b645c789ac05be7dfb01d903342b4cb68ecda10270644cf96d0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcft:X6QFElP6n+gJQMOtEvwDpjBsYK6t
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_7589bbb8cc53c92cf06bb52220b8aa90_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_7589bbb8cc53c92cf06bb52220b8aa90_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_7589bbb8cc53c92cf06bb52220b8aa90_cryptolocker
-
Size
39KB
-
MD5
7589bbb8cc53c92cf06bb52220b8aa90
-
SHA1
065e5b21efa39912a04cb8299b986acf067c2c68
-
SHA256
f0b4cbc4cceee07c0d3c6d7cb0802a5df67d9e214c4ae70ffd91f26572e38b2a
-
SHA512
97e7244752083b8e3d3b56c4aa10105377d51d45bd4af532423a804757151d8f9707638fcca49b645c789ac05be7dfb01d903342b4cb68ecda10270644cf96d0
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcft:X6QFElP6n+gJQMOtEvwDpjBsYK6t
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-