Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-13_027a869f1c844963bb0135f17c8c9ed6_cryptolocker
-
Size
47KB
-
Sample
240313-bs3j8aae68
-
MD5
027a869f1c844963bb0135f17c8c9ed6
-
SHA1
4e9cd7de12d6792451b158445980716cf7c0e763
-
SHA256
735cc58b7c3b91c709cea968590331f09ad22609bfdecde5a4240298d23ec135
-
SHA512
75de97f0b641ad1a7b7f40a3f525c6026094dd342aeb1a5395c111eaedbb10311588e18ad1b41501678059c1c39dbd237e26dc46918a1853f7c2d713b5fda8d4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556yPRZ0h:X6QFElP6n+gJQMOtEvwDpjB0GIWvPRa
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_027a869f1c844963bb0135f17c8c9ed6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_027a869f1c844963bb0135f17c8c9ed6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_027a869f1c844963bb0135f17c8c9ed6_cryptolocker
-
Size
47KB
-
MD5
027a869f1c844963bb0135f17c8c9ed6
-
SHA1
4e9cd7de12d6792451b158445980716cf7c0e763
-
SHA256
735cc58b7c3b91c709cea968590331f09ad22609bfdecde5a4240298d23ec135
-
SHA512
75de97f0b641ad1a7b7f40a3f525c6026094dd342aeb1a5395c111eaedbb10311588e18ad1b41501678059c1c39dbd237e26dc46918a1853f7c2d713b5fda8d4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556yPRZ0h:X6QFElP6n+gJQMOtEvwDpjB0GIWvPRa
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-