Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-13_fd2f9b589fc6c9c03d9815069b9c143f_cryptolocker
-
Size
386KB
-
Sample
240313-l29d8saf5t
-
MD5
fd2f9b589fc6c9c03d9815069b9c143f
-
SHA1
d91ee0f0afcd80b064f1871a7eea723393e66c0f
-
SHA256
7dabf13703c1600ce6a74ba58d597ab7bd672494a24fde1d6fdf077819da244a
-
SHA512
d47dd5eba31b080d8cd4e3a1764f5789763583323263c4d0e13d64a5f53f580637d6eb6c5d924332facc698e768dadd107887e2faaba07c01cd1dae8bcb0a9d5
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXt:nnOflT/ZFIjBz3xjTxynGUOUhXt
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_fd2f9b589fc6c9c03d9815069b9c143f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-03-13_fd2f9b589fc6c9c03d9815069b9c143f_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_fd2f9b589fc6c9c03d9815069b9c143f_cryptolocker
-
Size
386KB
-
MD5
fd2f9b589fc6c9c03d9815069b9c143f
-
SHA1
d91ee0f0afcd80b064f1871a7eea723393e66c0f
-
SHA256
7dabf13703c1600ce6a74ba58d597ab7bd672494a24fde1d6fdf077819da244a
-
SHA512
d47dd5eba31b080d8cd4e3a1764f5789763583323263c4d0e13d64a5f53f580637d6eb6c5d924332facc698e768dadd107887e2faaba07c01cd1dae8bcb0a9d5
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXt:nnOflT/ZFIjBz3xjTxynGUOUhXt
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-