Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-24_f23386eabcf56f9384976a5ad435fe04_cryptolocker
-
Size
386KB
-
Sample
240224-hh8rtacd28
-
MD5
f23386eabcf56f9384976a5ad435fe04
-
SHA1
477b294c974544a96c2606e19924f2f8a1236e15
-
SHA256
2761452e4d14bb933196dcc7f63d05f25811a626d5791e3ef71d22f81cb06cc2
-
SHA512
2430fdcad2eca884d94c840ebc788845e79354efd11949d4237a162929a7c5fcfd2e9d18578a6d40b868ad92fb5d1a354fb9748a457e395dfa2c9d4f7c5374c4
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXx:nnOflT/ZFIjBz3xjTxynGUOUhXx
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_f23386eabcf56f9384976a5ad435fe04_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_f23386eabcf56f9384976a5ad435fe04_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-24_f23386eabcf56f9384976a5ad435fe04_cryptolocker
-
Size
386KB
-
MD5
f23386eabcf56f9384976a5ad435fe04
-
SHA1
477b294c974544a96c2606e19924f2f8a1236e15
-
SHA256
2761452e4d14bb933196dcc7f63d05f25811a626d5791e3ef71d22f81cb06cc2
-
SHA512
2430fdcad2eca884d94c840ebc788845e79354efd11949d4237a162929a7c5fcfd2e9d18578a6d40b868ad92fb5d1a354fb9748a457e395dfa2c9d4f7c5374c4
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXx:nnOflT/ZFIjBz3xjTxynGUOUhXx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-