Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-25_a10f783b32d39871cf592f20fb6d5b78_cryptolocker
-
Size
44KB
-
Sample
240225-t6lgzaga66
-
MD5
a10f783b32d39871cf592f20fb6d5b78
-
SHA1
93e2131412d19b6034ffe4379795fe1e32ee4505
-
SHA256
db55800c6289107d0aa96b0e4008c0cbfd68dc40aaf9315c5ffa799c6fe21b72
-
SHA512
f92b7af38aa25efe56c0eae98ccc9f8bf1b0da53235b995258fe2f2048d2eb9150d452f762280dc5d7e8b28f151f1b3ed905b5df153fbc84b47fd4b1d0483d57
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqRoN6d:bxNrC7kYo1Fxf3s05rwxbFvN6d
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-25_a10f783b32d39871cf592f20fb6d5b78_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-25_a10f783b32d39871cf592f20fb6d5b78_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-25_a10f783b32d39871cf592f20fb6d5b78_cryptolocker
-
Size
44KB
-
MD5
a10f783b32d39871cf592f20fb6d5b78
-
SHA1
93e2131412d19b6034ffe4379795fe1e32ee4505
-
SHA256
db55800c6289107d0aa96b0e4008c0cbfd68dc40aaf9315c5ffa799c6fe21b72
-
SHA512
f92b7af38aa25efe56c0eae98ccc9f8bf1b0da53235b995258fe2f2048d2eb9150d452f762280dc5d7e8b28f151f1b3ed905b5df153fbc84b47fd4b1d0483d57
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqRoN6d:bxNrC7kYo1Fxf3s05rwxbFvN6d
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-