Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker
-
Size
70KB
-
Sample
240329-c5f3esff3x
-
MD5
2ab576b9b03cca762a9b8ccee2b29e9c
-
SHA1
410794f3d7d80ef85ca4843106b8ed1c7cbf37cf
-
SHA256
9fcbf62a1923bf992fd4e0faba0e81945fa8bfd0ff30b060a10c46be9a69dfe0
-
SHA512
24c2cd9a40d9d61ff52d5b17f686dad634953c612da40ae0bdc289cbe3d7917e7ac42a60461d099bbcd99ace3a4b0f9700d64125f4a0cb8c375a8d42a1b5a664
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker
-
Size
70KB
-
MD5
2ab576b9b03cca762a9b8ccee2b29e9c
-
SHA1
410794f3d7d80ef85ca4843106b8ed1c7cbf37cf
-
SHA256
9fcbf62a1923bf992fd4e0faba0e81945fa8bfd0ff30b060a10c46be9a69dfe0
-
SHA512
24c2cd9a40d9d61ff52d5b17f686dad634953c612da40ae0bdc289cbe3d7917e7ac42a60461d099bbcd99ace3a4b0f9700d64125f4a0cb8c375a8d42a1b5a664
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-