Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker
-
Size
68KB
-
Sample
240314-gsbz6aee69
-
MD5
4f769a489c0eb7296ce9b2ab11b6d07b
-
SHA1
28c7f52de67e2268ed17fea6c661a1ef828a633c
-
SHA256
bea2b95e81d05c023ea3ec160d9984d1d26d539abbca0a32177096490c254cd2
-
SHA512
bb628ddcf7e2c59dc64b47e86ad85b07d8e1d87e21e0fe323d31d658ebc6fe2929088717b30aa767606f6f02e8037f372917863359703587ce043b3249ad80ca
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUj:DW60sllyWOtEvwDpjwF85N
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker
-
Size
68KB
-
MD5
4f769a489c0eb7296ce9b2ab11b6d07b
-
SHA1
28c7f52de67e2268ed17fea6c661a1ef828a633c
-
SHA256
bea2b95e81d05c023ea3ec160d9984d1d26d539abbca0a32177096490c254cd2
-
SHA512
bb628ddcf7e2c59dc64b47e86ad85b07d8e1d87e21e0fe323d31d658ebc6fe2929088717b30aa767606f6f02e8037f372917863359703587ce043b3249ad80ca
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUj:DW60sllyWOtEvwDpjwF85N
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-