Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-28_48b9d38fa13b61fa69a684807f2aadf8_cryptolocker
-
Size
29KB
-
Sample
240228-ffbm7abe63
-
MD5
48b9d38fa13b61fa69a684807f2aadf8
-
SHA1
f025c60c1ed5ee07681663c52ef710b8ae1786c4
-
SHA256
91543d070d4374519112758246bae5b4bc544c61fe37553bacd2734177b61672
-
SHA512
d8b9e1135328482e87e1b5006d05d8b5416ab1625445a64b4f5ea8a23a67168715b42f4f8ecbc2c926af169a1eb2c1d875c5d7bf07948b994ce7c1940095b23a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJN:bA74zYcgT/Ekd0ryfjQRSj
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_48b9d38fa13b61fa69a684807f2aadf8_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-28_48b9d38fa13b61fa69a684807f2aadf8_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_48b9d38fa13b61fa69a684807f2aadf8_cryptolocker
-
Size
29KB
-
MD5
48b9d38fa13b61fa69a684807f2aadf8
-
SHA1
f025c60c1ed5ee07681663c52ef710b8ae1786c4
-
SHA256
91543d070d4374519112758246bae5b4bc544c61fe37553bacd2734177b61672
-
SHA512
d8b9e1135328482e87e1b5006d05d8b5416ab1625445a64b4f5ea8a23a67168715b42f4f8ecbc2c926af169a1eb2c1d875c5d7bf07948b994ce7c1940095b23a
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJN:bA74zYcgT/Ekd0ryfjQRSj
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-