Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-06_5cebd077b8f7c578fb1329a45e08a4fc_cryptolocker
-
Size
48KB
-
Sample
240306-awe3nadh3s
-
MD5
5cebd077b8f7c578fb1329a45e08a4fc
-
SHA1
d0eb4f7387c2b6ca6ce7708f746e31782c64007f
-
SHA256
3ebbea1ee14af610362343f2432fdef3e5c36ec632663da5dfedd8aef1f2bc50
-
SHA512
988dd9ab038cc236c0764cc710dbcb9fd3fa20bbbe28cb7793f7a059613e0fff762202d104ee592737257776ebb338af1579c7e6c99559ad5299ba605c06825c
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3wwsr0B9P:X6QFElP6n+gJQMOtEvwDpjBDw
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_5cebd077b8f7c578fb1329a45e08a4fc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_5cebd077b8f7c578fb1329a45e08a4fc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_5cebd077b8f7c578fb1329a45e08a4fc_cryptolocker
-
Size
48KB
-
MD5
5cebd077b8f7c578fb1329a45e08a4fc
-
SHA1
d0eb4f7387c2b6ca6ce7708f746e31782c64007f
-
SHA256
3ebbea1ee14af610362343f2432fdef3e5c36ec632663da5dfedd8aef1f2bc50
-
SHA512
988dd9ab038cc236c0764cc710dbcb9fd3fa20bbbe28cb7793f7a059613e0fff762202d104ee592737257776ebb338af1579c7e6c99559ad5299ba605c06825c
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3wwsr0B9P:X6QFElP6n+gJQMOtEvwDpjBDw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-