Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker
-
Size
126KB
-
Sample
240229-fkdy4sdh72
-
MD5
63d967c274b12a6a4eb8ec4fb13ddbe7
-
SHA1
87f3007392aeaa056fb508e245123bde0772b0b8
-
SHA256
dbd019d2130295ba7b274640fd58e6385f75566f3c695a4aa680e585b249f895
-
SHA512
51bcd83703f426065a468e1cec492c89dd7b480bc2ef60fdbbd93da2d001fd2e7ca1687ba507ca1ba4c8c223f83f12d298c8bb9ccbace943c25bd09a03b7152e
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxL:vCA9OtEvwDpjv
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker
-
Size
126KB
-
MD5
63d967c274b12a6a4eb8ec4fb13ddbe7
-
SHA1
87f3007392aeaa056fb508e245123bde0772b0b8
-
SHA256
dbd019d2130295ba7b274640fd58e6385f75566f3c695a4aa680e585b249f895
-
SHA512
51bcd83703f426065a468e1cec492c89dd7b480bc2ef60fdbbd93da2d001fd2e7ca1687ba507ca1ba4c8c223f83f12d298c8bb9ccbace943c25bd09a03b7152e
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxL:vCA9OtEvwDpjv
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-