Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_fb3d07fd5f7ba731c198a6253fa338be_cryptolocker
-
Size
41KB
-
Sample
240223-vfp8xadf54
-
MD5
fb3d07fd5f7ba731c198a6253fa338be
-
SHA1
e3ca3c09b430b18df8ef24f0f640dea2fd553d95
-
SHA256
a2c7bb78b7210bef61e3af859d650054ccb7e32a322ebcbe62db303a0c48d239
-
SHA512
b850b2bb3fe58955aa5d714d40a30a350481b710c17d56ab4b5a35bfa41a7ac1f79b391a422b95b31e3b8def7b7148d0569da72101dd5a29700f4a1fb1ac1512
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMpheY:bc/y2lkF0+BeF
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_fb3d07fd5f7ba731c198a6253fa338be_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-23_fb3d07fd5f7ba731c198a6253fa338be_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_fb3d07fd5f7ba731c198a6253fa338be_cryptolocker
-
Size
41KB
-
MD5
fb3d07fd5f7ba731c198a6253fa338be
-
SHA1
e3ca3c09b430b18df8ef24f0f640dea2fd553d95
-
SHA256
a2c7bb78b7210bef61e3af859d650054ccb7e32a322ebcbe62db303a0c48d239
-
SHA512
b850b2bb3fe58955aa5d714d40a30a350481b710c17d56ab4b5a35bfa41a7ac1f79b391a422b95b31e3b8def7b7148d0569da72101dd5a29700f4a1fb1ac1512
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMpheY:bc/y2lkF0+BeF
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-