Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-12_5119d5075e0f8b994b15bf32bf20e192_cryptolocker
-
Size
48KB
-
Sample
240312-asvnyaaf8v
-
MD5
5119d5075e0f8b994b15bf32bf20e192
-
SHA1
1f62c13f511220316fc058fbc4e1dc62f936b14e
-
SHA256
7e8c82a2975e6278728cad7028b6f58cb56992d9783753a28221fa2d20781c16
-
SHA512
3e96a2fbaa79528a2057490ba90e0c75b3a4d67914bcb52111b7bbd4087cd4291576a6ff7bff85d3c108a371c8a434e31c78d2bccec939ea0fbb8442125ae6b2
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4UKn7yXYJmWO:bIDOw9a0DwitDTkO
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_5119d5075e0f8b994b15bf32bf20e192_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-12_5119d5075e0f8b994b15bf32bf20e192_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_5119d5075e0f8b994b15bf32bf20e192_cryptolocker
-
Size
48KB
-
MD5
5119d5075e0f8b994b15bf32bf20e192
-
SHA1
1f62c13f511220316fc058fbc4e1dc62f936b14e
-
SHA256
7e8c82a2975e6278728cad7028b6f58cb56992d9783753a28221fa2d20781c16
-
SHA512
3e96a2fbaa79528a2057490ba90e0c75b3a4d67914bcb52111b7bbd4087cd4291576a6ff7bff85d3c108a371c8a434e31c78d2bccec939ea0fbb8442125ae6b2
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4UKn7yXYJmWO:bIDOw9a0DwitDTkO
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-