Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-19_fb4a23de4dd80b07cbfaf696ed01ea76_cryptolocker
-
Size
122KB
-
Sample
240319-wnggeabc91
-
MD5
fb4a23de4dd80b07cbfaf696ed01ea76
-
SHA1
06736bc18a3e8dded443aa843227c228f5c4986f
-
SHA256
bf9dfec755ef003ea3cb931937f7034f5f5cbe07c97da537eb88d7e28bd65b2e
-
SHA512
44608b3385e0029e8dde2925c2c9b329c451142e0bc6e46ac174958d8844f3a46aa0684c5a52cb38fc0fa50eea65caaefdfee3f468fac4c9b1ba83b6d50cf22e
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMg/:u6a++OtEvwDpj6zb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_fb4a23de4dd80b07cbfaf696ed01ea76_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_fb4a23de4dd80b07cbfaf696ed01ea76_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-19_fb4a23de4dd80b07cbfaf696ed01ea76_cryptolocker
-
Size
122KB
-
MD5
fb4a23de4dd80b07cbfaf696ed01ea76
-
SHA1
06736bc18a3e8dded443aa843227c228f5c4986f
-
SHA256
bf9dfec755ef003ea3cb931937f7034f5f5cbe07c97da537eb88d7e28bd65b2e
-
SHA512
44608b3385e0029e8dde2925c2c9b329c451142e0bc6e46ac174958d8844f3a46aa0684c5a52cb38fc0fa50eea65caaefdfee3f468fac4c9b1ba83b6d50cf22e
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMg/:u6a++OtEvwDpj6zb
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-