Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-28_95348e3b5ebf247a79da5b3efcba3882_cryptolocker
-
Size
61KB
-
Sample
240228-1fxwmsed91
-
MD5
95348e3b5ebf247a79da5b3efcba3882
-
SHA1
552b666cef6ba4eccbe7dfd976d1d982eb00cd28
-
SHA256
4cd7c47902345f29cd2a838eec9e7d4d9fa65d25a59ffd137b84c07983d261b7
-
SHA512
da5734f8e4eb98184a803cffab64de054099a545964e8ab5d3a4f9dd56ecfafea3f962efaaf06eda01b6fea068979b9fba2617194310300b866595277cad7be9
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIN:TCjsIOtEvwDpj5HE/OUHnSMT
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_95348e3b5ebf247a79da5b3efcba3882_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_95348e3b5ebf247a79da5b3efcba3882_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_95348e3b5ebf247a79da5b3efcba3882_cryptolocker
-
Size
61KB
-
MD5
95348e3b5ebf247a79da5b3efcba3882
-
SHA1
552b666cef6ba4eccbe7dfd976d1d982eb00cd28
-
SHA256
4cd7c47902345f29cd2a838eec9e7d4d9fa65d25a59ffd137b84c07983d261b7
-
SHA512
da5734f8e4eb98184a803cffab64de054099a545964e8ab5d3a4f9dd56ecfafea3f962efaaf06eda01b6fea068979b9fba2617194310300b866595277cad7be9
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIN:TCjsIOtEvwDpj5HE/OUHnSMT
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-