Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-28_88ee7dbbbe2f4985b2d2c685c703dd63_cryptolocker
-
Size
43KB
-
Sample
240328-a1yqkaca7w
-
MD5
88ee7dbbbe2f4985b2d2c685c703dd63
-
SHA1
ee60c9016837b2b0b5b5acb9fd9b709336e759b3
-
SHA256
65ffa23bbd141a743074f61582619305e1e0ecd8428290a374f81ead89ff0625
-
SHA512
9dec74df87c37521683328cf60fbaefc052d43acf98907fb6cb4858e638a2bf361dd07f1ec31a3215329b8dba91dbd87b65398bef24d0d42eac2f337e6ad74b8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNA1:bgGYcA/53GADw8Cl/n1
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_88ee7dbbbe2f4985b2d2c685c703dd63_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_88ee7dbbbe2f4985b2d2c685c703dd63_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-28_88ee7dbbbe2f4985b2d2c685c703dd63_cryptolocker
-
Size
43KB
-
MD5
88ee7dbbbe2f4985b2d2c685c703dd63
-
SHA1
ee60c9016837b2b0b5b5acb9fd9b709336e759b3
-
SHA256
65ffa23bbd141a743074f61582619305e1e0ecd8428290a374f81ead89ff0625
-
SHA512
9dec74df87c37521683328cf60fbaefc052d43acf98907fb6cb4858e638a2bf361dd07f1ec31a3215329b8dba91dbd87b65398bef24d0d42eac2f337e6ad74b8
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNA1:bgGYcA/53GADw8Cl/n1
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-