Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-20_1b2a0ae1b50c8e8cdf728d98fbc7ad61_cryptolocker
-
Size
45KB
-
Sample
240320-c8fwtsfa47
-
MD5
1b2a0ae1b50c8e8cdf728d98fbc7ad61
-
SHA1
bb63fad1d97079fb2ddbbe827a242762172d0bcd
-
SHA256
887aac81197ce576c4f6418072c7bcc8ec81b00a40825df026e1d0958be9c536
-
SHA512
29525fe16295835eb8d779d4a26b1c3649745702aa012e3309285a0d2fd29f91e3ac92cdb2b628876007bf7e833bfac3413cb38c8997efdc95af7631a26e16db
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoA0:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ1
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-20_1b2a0ae1b50c8e8cdf728d98fbc7ad61_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-20_1b2a0ae1b50c8e8cdf728d98fbc7ad61_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-20_1b2a0ae1b50c8e8cdf728d98fbc7ad61_cryptolocker
-
Size
45KB
-
MD5
1b2a0ae1b50c8e8cdf728d98fbc7ad61
-
SHA1
bb63fad1d97079fb2ddbbe827a242762172d0bcd
-
SHA256
887aac81197ce576c4f6418072c7bcc8ec81b00a40825df026e1d0958be9c536
-
SHA512
29525fe16295835eb8d779d4a26b1c3649745702aa012e3309285a0d2fd29f91e3ac92cdb2b628876007bf7e833bfac3413cb38c8997efdc95af7631a26e16db
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoA0:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ1
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-