Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-12_cb77e907af0c2d39ed058a1b0e9feb73_cryptolocker
-
Size
88KB
-
Sample
240312-jdfqxadf24
-
MD5
cb77e907af0c2d39ed058a1b0e9feb73
-
SHA1
708e768c27729614c62d2777ad8f2e055d4185c9
-
SHA256
3e270bcb57a6b395a15c073ff9e3135d4bc947ff895bf00d5a93e4b94fbc0e61
-
SHA512
83aa2e6e7c3ec66f63d6401b1a72a0ed414a86f36204c50166ec624d4ff9df85bab927df2b30dc82aa4388629556368fcc38dbee13c35c8e92733394a6d6b7cf
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQYg:vCjsIOtEvwDpj5H8zPsh
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_cb77e907af0c2d39ed058a1b0e9feb73_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-12_cb77e907af0c2d39ed058a1b0e9feb73_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-12_cb77e907af0c2d39ed058a1b0e9feb73_cryptolocker
-
Size
88KB
-
MD5
cb77e907af0c2d39ed058a1b0e9feb73
-
SHA1
708e768c27729614c62d2777ad8f2e055d4185c9
-
SHA256
3e270bcb57a6b395a15c073ff9e3135d4bc947ff895bf00d5a93e4b94fbc0e61
-
SHA512
83aa2e6e7c3ec66f63d6401b1a72a0ed414a86f36204c50166ec624d4ff9df85bab927df2b30dc82aa4388629556368fcc38dbee13c35c8e92733394a6d6b7cf
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQYg:vCjsIOtEvwDpj5H8zPsh
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-