Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker
-
Size
63KB
-
Sample
240229-khkq4abe8t
-
MD5
540133c2799cabad4b5c8b6f81a5e0d4
-
SHA1
caea03bbcf8c84d6fb69d224df39d8e403e345d3
-
SHA256
57660d2ead4ca60aaaee659ecd5293310e8e3db659ef795e5bebcf7eaab46e1a
-
SHA512
1daf0c6f90091a036279940cad4375c8473d598b441f60f6422a7d36526adba7fb23a05782264ed46ed76be7f40c6f8fc56a0ef0106d313db1d753e6734fe905
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Z
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker
-
Size
63KB
-
MD5
540133c2799cabad4b5c8b6f81a5e0d4
-
SHA1
caea03bbcf8c84d6fb69d224df39d8e403e345d3
-
SHA256
57660d2ead4ca60aaaee659ecd5293310e8e3db659ef795e5bebcf7eaab46e1a
-
SHA512
1daf0c6f90091a036279940cad4375c8473d598b441f60f6422a7d36526adba7fb23a05782264ed46ed76be7f40c6f8fc56a0ef0106d313db1d753e6734fe905
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Z
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-