Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker
-
Size
40KB
-
Sample
240223-srdcdach81
-
MD5
881d4b0e91b8b1636314a16c531de30d
-
SHA1
9dcef4bc488e8924aa1624de2c2bf57d0352a110
-
SHA256
e1a9999c6ac31caa1c159ee8b5a21c99b26e12568c3699799bd8e5c40786ef4e
-
SHA512
476796356f4d6c3069537306c8bd91591856890c4740be65cc0b5688b9fdceb69fec7d6dc3d0842635ba377714be335ea36c1b4314e3f81215602f34f9052e0f
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbZM+iS:bAvJCYOOvbRPDEgXrNekd7l94i3p+kuG
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker
-
Size
40KB
-
MD5
881d4b0e91b8b1636314a16c531de30d
-
SHA1
9dcef4bc488e8924aa1624de2c2bf57d0352a110
-
SHA256
e1a9999c6ac31caa1c159ee8b5a21c99b26e12568c3699799bd8e5c40786ef4e
-
SHA512
476796356f4d6c3069537306c8bd91591856890c4740be65cc0b5688b9fdceb69fec7d6dc3d0842635ba377714be335ea36c1b4314e3f81215602f34f9052e0f
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbZM+iS:bAvJCYOOvbRPDEgXrNekd7l94i3p+kuG
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-