Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-15_99a6ddf994c0fecf64bd5345b5f3e98c_cryptolocker
-
Size
49KB
-
Sample
240315-q7frbsaa7z
-
MD5
99a6ddf994c0fecf64bd5345b5f3e98c
-
SHA1
70d0ae83b1cfa18e0d2f630183407733e9d7597e
-
SHA256
4d65c8845b68da5fa654919cf8930bc0b85b6ef6cb82d0053b982945a0014ff8
-
SHA512
0346da28856c8da95e43f8a06a35d678c392a135cf23fce661e09187313332066e9a5c094354fc9d19ea6f537934108a7392729b0153e2fb3439105d6e73a4ad
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZT:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLN
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_99a6ddf994c0fecf64bd5345b5f3e98c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_99a6ddf994c0fecf64bd5345b5f3e98c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_99a6ddf994c0fecf64bd5345b5f3e98c_cryptolocker
-
Size
49KB
-
MD5
99a6ddf994c0fecf64bd5345b5f3e98c
-
SHA1
70d0ae83b1cfa18e0d2f630183407733e9d7597e
-
SHA256
4d65c8845b68da5fa654919cf8930bc0b85b6ef6cb82d0053b982945a0014ff8
-
SHA512
0346da28856c8da95e43f8a06a35d678c392a135cf23fce661e09187313332066e9a5c094354fc9d19ea6f537934108a7392729b0153e2fb3439105d6e73a4ad
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZT:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-