Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-09_f51474659882c7083f40acfefe68cd89_cryptolocker
-
Size
61KB
-
Sample
240309-wcfezaed8y
-
MD5
f51474659882c7083f40acfefe68cd89
-
SHA1
cdab12ac6d2b08894abedc03abb428c5ce27db7e
-
SHA256
215e7fd8028f432b2ea21bfeeddcc6cdfa70beb8205d645b8cf6cbff907c9c95
-
SHA512
b775ad822ed1b24f7612fcbfc6ec7b544ed69e59a361160dcd7158d707f4706189334f8a20aecf0f20ddfbca413215e8915039030e08054354ced22d4b963c1c
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHs:btng54SMLr+/AO/kIhfoKMHd1
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_f51474659882c7083f40acfefe68cd89_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_f51474659882c7083f40acfefe68cd89_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_f51474659882c7083f40acfefe68cd89_cryptolocker
-
Size
61KB
-
MD5
f51474659882c7083f40acfefe68cd89
-
SHA1
cdab12ac6d2b08894abedc03abb428c5ce27db7e
-
SHA256
215e7fd8028f432b2ea21bfeeddcc6cdfa70beb8205d645b8cf6cbff907c9c95
-
SHA512
b775ad822ed1b24f7612fcbfc6ec7b544ed69e59a361160dcd7158d707f4706189334f8a20aecf0f20ddfbca413215e8915039030e08054354ced22d4b963c1c
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHs:btng54SMLr+/AO/kIhfoKMHd1
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-