Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker
-
Size
48KB
-
Sample
240315-z9e29add49
-
MD5
0325c188152f7d2087bed40a0b87ad81
-
SHA1
8c2f6194de430c54053ddec206c0301281abe348
-
SHA256
048bc20e087e8d7496f5aa624be16c18b7d18a97cb886bc6a536dc2b2c1227fc
-
SHA512
5a21df44ea62ad352623242aafb87e65a9e6dca8bb10e2553aec2f45b27ff33c31f61dbbd439d3cc5b67a48c35cf1347b13ad27f70b044fccaea5622bd17ec5c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8x:vj+jsMQMOtEvwDpj5Hczer5ixuMU
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker
-
Size
48KB
-
MD5
0325c188152f7d2087bed40a0b87ad81
-
SHA1
8c2f6194de430c54053ddec206c0301281abe348
-
SHA256
048bc20e087e8d7496f5aa624be16c18b7d18a97cb886bc6a536dc2b2c1227fc
-
SHA512
5a21df44ea62ad352623242aafb87e65a9e6dca8bb10e2553aec2f45b27ff33c31f61dbbd439d3cc5b67a48c35cf1347b13ad27f70b044fccaea5622bd17ec5c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8x:vj+jsMQMOtEvwDpj5Hczer5ixuMU
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-