Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-28_bc1e51d94a46c4c2d8213e3cfc71715c_cryptolocker
-
Size
40KB
-
Sample
240328-hmgtwseh6w
-
MD5
bc1e51d94a46c4c2d8213e3cfc71715c
-
SHA1
54e2874e8ae2d3ae26895ee114b16b1d454d469c
-
SHA256
cf30333972a124401bfbdb32ddb19dfc20668b9292c2ff9250b12871a2d1155c
-
SHA512
8f36ee4dc3189f40f9f99a3db742b53c30e3c5dc2c9a491c6f84b6658022ec1020ad5788db7899a6c95fbb32ad2106f0611b5bdc50158aed7caff11715fa6ee3
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAI:bCDOw9aMDooc+vAI
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_bc1e51d94a46c4c2d8213e3cfc71715c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_bc1e51d94a46c4c2d8213e3cfc71715c_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-03-28_bc1e51d94a46c4c2d8213e3cfc71715c_cryptolocker
-
Size
40KB
-
MD5
bc1e51d94a46c4c2d8213e3cfc71715c
-
SHA1
54e2874e8ae2d3ae26895ee114b16b1d454d469c
-
SHA256
cf30333972a124401bfbdb32ddb19dfc20668b9292c2ff9250b12871a2d1155c
-
SHA512
8f36ee4dc3189f40f9f99a3db742b53c30e3c5dc2c9a491c6f84b6658022ec1020ad5788db7899a6c95fbb32ad2106f0611b5bdc50158aed7caff11715fa6ee3
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAI:bCDOw9aMDooc+vAI
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-