Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-10_2f7270a9e1c5d4062ed7533f998ed277_cryptolocker
-
Size
50KB
-
Sample
240310-ygardsag39
-
MD5
2f7270a9e1c5d4062ed7533f998ed277
-
SHA1
1c46fa82169a5623e1af5edf9dde6934ea59b8e2
-
SHA256
bb12173a7f592bef93a07913640c07fec759a334c34058082cc773d5aa47888f
-
SHA512
9d84edad2f263bb74cbf91a1951885788f1d43c090f3a904a0e53ccedb8036d2767123e1d2eac25b34b013de9d2b1efb8fa2297128f659b6d5eb16c5bdbf6b6a
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAICh:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7V
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_2f7270a9e1c5d4062ed7533f998ed277_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_2f7270a9e1c5d4062ed7533f998ed277_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_2f7270a9e1c5d4062ed7533f998ed277_cryptolocker
-
Size
50KB
-
MD5
2f7270a9e1c5d4062ed7533f998ed277
-
SHA1
1c46fa82169a5623e1af5edf9dde6934ea59b8e2
-
SHA256
bb12173a7f592bef93a07913640c07fec759a334c34058082cc773d5aa47888f
-
SHA512
9d84edad2f263bb74cbf91a1951885788f1d43c090f3a904a0e53ccedb8036d2767123e1d2eac25b34b013de9d2b1efb8fa2297128f659b6d5eb16c5bdbf6b6a
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAICh:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7V
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-