Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-07_1a22b24fb7c7724fafe2f6da9d1217ad_cryptolocker
-
Size
43KB
-
Sample
240307-f573paff81
-
MD5
1a22b24fb7c7724fafe2f6da9d1217ad
-
SHA1
e4cfe7549b02c02414dd42190127c960c058684d
-
SHA256
ba28bd135b1f957b4435018a77b32ec45aa4bf79db1b1794e8cd5910ee1f7069
-
SHA512
7108eb0bc2cc10092791d43034f495471e6a509c17c2717f01b24d9777529b74333f122453c4f1b29078842e0009ae2d82aa119005db5f3b5a8f59991aefeab1
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuz:bc/y2lkF0+Bjrduz
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_1a22b24fb7c7724fafe2f6da9d1217ad_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_1a22b24fb7c7724fafe2f6da9d1217ad_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_1a22b24fb7c7724fafe2f6da9d1217ad_cryptolocker
-
Size
43KB
-
MD5
1a22b24fb7c7724fafe2f6da9d1217ad
-
SHA1
e4cfe7549b02c02414dd42190127c960c058684d
-
SHA256
ba28bd135b1f957b4435018a77b32ec45aa4bf79db1b1794e8cd5910ee1f7069
-
SHA512
7108eb0bc2cc10092791d43034f495471e6a509c17c2717f01b24d9777529b74333f122453c4f1b29078842e0009ae2d82aa119005db5f3b5a8f59991aefeab1
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqrwGuz:bc/y2lkF0+Bjrduz
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-