Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker
-
Size
40KB
-
Sample
240319-z8fbmaga45
-
MD5
01bae834316b61a55bfc55ea15611e99
-
SHA1
4af1e99574b3cd5465ec443f1fe2679f265d09ac
-
SHA256
ed07abf6c48e1e4972d7a05a8b91f32f8d23170863f0e1db15016c13211062a1
-
SHA512
35fbf3374fd620d020e295b3a90320ad4864f707012bee51b29c993f4e91039bee83a7b9f6e6fab17dd1a642a837c0f9609ecc971870d96885cbf99bd84f462f
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66q:vj+jsMQMOtEvwDpj5HW5B
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker
-
Size
40KB
-
MD5
01bae834316b61a55bfc55ea15611e99
-
SHA1
4af1e99574b3cd5465ec443f1fe2679f265d09ac
-
SHA256
ed07abf6c48e1e4972d7a05a8b91f32f8d23170863f0e1db15016c13211062a1
-
SHA512
35fbf3374fd620d020e295b3a90320ad4864f707012bee51b29c993f4e91039bee83a7b9f6e6fab17dd1a642a837c0f9609ecc971870d96885cbf99bd84f462f
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66q:vj+jsMQMOtEvwDpj5HW5B
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-