Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-07_8c2b760aeb4e7fb258a045b60b4d8152_cryptolocker
-
Size
38KB
-
Sample
240307-3j7alaab8x
-
MD5
8c2b760aeb4e7fb258a045b60b4d8152
-
SHA1
5c8607badfa9856ca9ea9ab2ef09b0f72384e90d
-
SHA256
1911915ebbe4694fc6fd9001460e072ff9f9187bf9d15b4f5d8ce888114b237d
-
SHA512
7e8005fd98f1a23295ee315b49222577e0b2154247fa34cbfb39015391c88ea7291384bfe65d380b242d5c727218f302761adadd55688bd2d0d8feaf90ffde03
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfXsTV2:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXqI
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_8c2b760aeb4e7fb258a045b60b4d8152_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_8c2b760aeb4e7fb258a045b60b4d8152_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_8c2b760aeb4e7fb258a045b60b4d8152_cryptolocker
-
Size
38KB
-
MD5
8c2b760aeb4e7fb258a045b60b4d8152
-
SHA1
5c8607badfa9856ca9ea9ab2ef09b0f72384e90d
-
SHA256
1911915ebbe4694fc6fd9001460e072ff9f9187bf9d15b4f5d8ce888114b237d
-
SHA512
7e8005fd98f1a23295ee315b49222577e0b2154247fa34cbfb39015391c88ea7291384bfe65d380b242d5c727218f302761adadd55688bd2d0d8feaf90ffde03
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZnfXsTV2:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXqI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-