Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-14_87959326cf295b4154df672a62b67bc6_cryptolocker
-
Size
41KB
-
Sample
240314-3p3jlacf98
-
MD5
87959326cf295b4154df672a62b67bc6
-
SHA1
9c771621f22d901f8a8962f197d64ace47036f6a
-
SHA256
c339b79bfcc7672c7dcfc1619d02226294ba4c1a471e361f213b4666c93d411a
-
SHA512
5b05a43ef61f45ea963182a446242453f308758bb1c8c4642acdd8f7599702458d2848cc9bdc65e983df08c56abd6526dcd0b2fb65c5bafafe138eefbba64d77
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKLV:bIDOw9a0Dwo3P1ojvUSDhT
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_87959326cf295b4154df672a62b67bc6_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-14_87959326cf295b4154df672a62b67bc6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_87959326cf295b4154df672a62b67bc6_cryptolocker
-
Size
41KB
-
MD5
87959326cf295b4154df672a62b67bc6
-
SHA1
9c771621f22d901f8a8962f197d64ace47036f6a
-
SHA256
c339b79bfcc7672c7dcfc1619d02226294ba4c1a471e361f213b4666c93d411a
-
SHA512
5b05a43ef61f45ea963182a446242453f308758bb1c8c4642acdd8f7599702458d2848cc9bdc65e983df08c56abd6526dcd0b2fb65c5bafafe138eefbba64d77
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6Dy8POKLV:bIDOw9a0Dwo3P1ojvUSDhT
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-