Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-06_26d1e8cd1cd75b4fce9e92a49c2c1e1b_cryptolocker
-
Size
49KB
-
Sample
240306-gaphjadd33
-
MD5
26d1e8cd1cd75b4fce9e92a49c2c1e1b
-
SHA1
fcc74f3dc92d7852044410b9f69cdb2fd949472b
-
SHA256
680e342ebaeeda359aa09b99ae97330a0a44ae4cc82a14bc54ea7bb57ccd19d0
-
SHA512
e99c9cbe620c6937b89cddb5ce585da698d9ec3f5e96a0952c0a5f557ac8158e729943ce41c7fa1ee314334fda30072e4ad28f0f6c954cceb5ab0acf1b505c7d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZD:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLN
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-06_26d1e8cd1cd75b4fce9e92a49c2c1e1b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-06_26d1e8cd1cd75b4fce9e92a49c2c1e1b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-06_26d1e8cd1cd75b4fce9e92a49c2c1e1b_cryptolocker
-
Size
49KB
-
MD5
26d1e8cd1cd75b4fce9e92a49c2c1e1b
-
SHA1
fcc74f3dc92d7852044410b9f69cdb2fd949472b
-
SHA256
680e342ebaeeda359aa09b99ae97330a0a44ae4cc82a14bc54ea7bb57ccd19d0
-
SHA512
e99c9cbe620c6937b89cddb5ce585da698d9ec3f5e96a0952c0a5f557ac8158e729943ce41c7fa1ee314334fda30072e4ad28f0f6c954cceb5ab0acf1b505c7d
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZD:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-