Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker
-
Size
47KB
-
Sample
240224-bt4tnsee61
-
MD5
13aa363aa3b7c2a561c02d8fcde146d0
-
SHA1
56611c7c23fc4d1f07903e363ecd5e3d512a6a66
-
SHA256
b7849f4389d339e30448f6fc6b7732faadadf0726fe376771d1abba2e95f0741
-
SHA512
9678b13965cf622a522aebceace10e0517b56fa600d88942f8e949587ebf6893d8aec4ab59a78bf3880b24e33753543f7755bc16f209b4c7ad92c69acc92c812
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUujKeMZA:vj+jsMQMOtEvwDpj5Hczer5ixjKeMK
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker
-
Size
47KB
-
MD5
13aa363aa3b7c2a561c02d8fcde146d0
-
SHA1
56611c7c23fc4d1f07903e363ecd5e3d512a6a66
-
SHA256
b7849f4389d339e30448f6fc6b7732faadadf0726fe376771d1abba2e95f0741
-
SHA512
9678b13965cf622a522aebceace10e0517b56fa600d88942f8e949587ebf6893d8aec4ab59a78bf3880b24e33753543f7755bc16f209b4c7ad92c69acc92c812
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUujKeMZA:vj+jsMQMOtEvwDpj5Hczer5ixjKeMK
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-