Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-20_c453f1e9c7cfb024a4c56dde3621b7ac_cryptolocker
-
Size
48KB
-
Sample
240320-dgd4lafh4z
-
MD5
c453f1e9c7cfb024a4c56dde3621b7ac
-
SHA1
4003adaacc98dadd4bcc1e498e6966917e72847e
-
SHA256
e3903e8459973abdf936ba987a46b47d50776d06f2074b62618af4d201aee059
-
SHA512
ac1ad0a1338b75ea2ffc1ef7bfbb0f448e58ef0a2f7b4b95efbbc22e431dd7f9d7bf50d73e4802410a9ff87f0d2340f3172f80e7718cef90c2c0ffa990de6a49
-
SSDEEP
768:B9inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTb1AP+:B9mqyNhQMOtEvwDpjBxe8S1A2
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-20_c453f1e9c7cfb024a4c56dde3621b7ac_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-20_c453f1e9c7cfb024a4c56dde3621b7ac_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-20_c453f1e9c7cfb024a4c56dde3621b7ac_cryptolocker
-
Size
48KB
-
MD5
c453f1e9c7cfb024a4c56dde3621b7ac
-
SHA1
4003adaacc98dadd4bcc1e498e6966917e72847e
-
SHA256
e3903e8459973abdf936ba987a46b47d50776d06f2074b62618af4d201aee059
-
SHA512
ac1ad0a1338b75ea2ffc1ef7bfbb0f448e58ef0a2f7b4b95efbbc22e431dd7f9d7bf50d73e4802410a9ff87f0d2340f3172f80e7718cef90c2c0ffa990de6a49
-
SSDEEP
768:B9inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTb1AP+:B9mqyNhQMOtEvwDpjBxe8S1A2
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-