Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-18_b67cabbd9522b04d2c5a27520e39f2f0_cryptolocker
-
Size
35KB
-
Sample
240318-3m3rksbg22
-
MD5
b67cabbd9522b04d2c5a27520e39f2f0
-
SHA1
7e0f27fa047a9d56eb5d7e312214e0aa26d9d15c
-
SHA256
03091d9900daeb0d1fe65a1ba2a729df1782f256c256552be2b1a61ddfc6fc33
-
SHA512
1caa01287f69b82f3296cce1af51dd1ab9ae438792eb581e646f50de6e8b1364a5fd3f7233bf9a197c592f9a9a1fa737ef229ff461424b6f56bd10a12fb51253
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkP:qDdFJy3QMOtEvwDpjjWMlM
Behavioral task
behavioral1
Sample
2024-03-18_b67cabbd9522b04d2c5a27520e39f2f0_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-18_b67cabbd9522b04d2c5a27520e39f2f0_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-18_b67cabbd9522b04d2c5a27520e39f2f0_cryptolocker
-
Size
35KB
-
MD5
b67cabbd9522b04d2c5a27520e39f2f0
-
SHA1
7e0f27fa047a9d56eb5d7e312214e0aa26d9d15c
-
SHA256
03091d9900daeb0d1fe65a1ba2a729df1782f256c256552be2b1a61ddfc6fc33
-
SHA512
1caa01287f69b82f3296cce1af51dd1ab9ae438792eb581e646f50de6e8b1364a5fd3f7233bf9a197c592f9a9a1fa737ef229ff461424b6f56bd10a12fb51253
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkP:qDdFJy3QMOtEvwDpjjWMlM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-