Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-14_523e0250a4bf004c9e1ff63c59c8eefa_cryptolocker
-
Size
34KB
-
Sample
240314-qww9yadc6z
-
MD5
523e0250a4bf004c9e1ff63c59c8eefa
-
SHA1
8ff992b97c07badec386d9e22b9352c19d2f2f2a
-
SHA256
7980ada38ca1bc359333373fa86a1245d7e8c19c35c882ed0c69d2eaee41ebad
-
SHA512
725313e5440ab1a7e31392f3ab0cf40cdca35044a0e7373b9f12e8ebbff5beebb8617ee25efa2af0e0c2456d33f449ae3cc9c5750a467027640d58434cf8b919
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFteWcdaJ7:b7o/2n1TCraU6GD1a4Xt9bRwW9aJ7
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-14_523e0250a4bf004c9e1ff63c59c8eefa_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-14_523e0250a4bf004c9e1ff63c59c8eefa_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-14_523e0250a4bf004c9e1ff63c59c8eefa_cryptolocker
-
Size
34KB
-
MD5
523e0250a4bf004c9e1ff63c59c8eefa
-
SHA1
8ff992b97c07badec386d9e22b9352c19d2f2f2a
-
SHA256
7980ada38ca1bc359333373fa86a1245d7e8c19c35c882ed0c69d2eaee41ebad
-
SHA512
725313e5440ab1a7e31392f3ab0cf40cdca35044a0e7373b9f12e8ebbff5beebb8617ee25efa2af0e0c2456d33f449ae3cc9c5750a467027640d58434cf8b919
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RwFteWcdaJ7:b7o/2n1TCraU6GD1a4Xt9bRwW9aJ7
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-