Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-12_a520b8e6be65170368cc329b56c52693_cryptolocker
-
Size
37KB
-
Sample
240312-gh8alsbg98
-
MD5
a520b8e6be65170368cc329b56c52693
-
SHA1
75278167c241bcffd65382c13342b2433f24c0f3
-
SHA256
aac34440c3e9599a377413c6b4334ca75e6970dc8c755f22d03a949f814fe5f7
-
SHA512
99578f5ae6fe8cc927aaf2c1185648ac6bc488dca2c5f8cb662141c228d8db21415f572d229499d3e05b44712df1930c4a12dbbb48e5f4e78aadacda14e8e949
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCwyYoq:X6QFElP6n+gJQMOtEvwDpjBmzDUPy
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_a520b8e6be65170368cc329b56c52693_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_a520b8e6be65170368cc329b56c52693_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_a520b8e6be65170368cc329b56c52693_cryptolocker
-
Size
37KB
-
MD5
a520b8e6be65170368cc329b56c52693
-
SHA1
75278167c241bcffd65382c13342b2433f24c0f3
-
SHA256
aac34440c3e9599a377413c6b4334ca75e6970dc8c755f22d03a949f814fe5f7
-
SHA512
99578f5ae6fe8cc927aaf2c1185648ac6bc488dca2c5f8cb662141c228d8db21415f572d229499d3e05b44712df1930c4a12dbbb48e5f4e78aadacda14e8e949
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCwyYoq:X6QFElP6n+gJQMOtEvwDpjBmzDUPy
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-