Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-05_f774f400c5e0321f273d35248728e15d_cryptolocker
-
Size
45KB
-
Sample
240405-faf1qacd2z
-
MD5
f774f400c5e0321f273d35248728e15d
-
SHA1
46e6a7fba78af4b616a9db65848773a604142af5
-
SHA256
e04905389c5f4ebfacb3c7ba1d3f2dc142ecbd75db224e824a5a8139c3b15c10
-
SHA512
c0e94162fcfb03a65c2236e21c7d1c5e15a832d8acdfdc709a285e768024065731fb8493f4405808be25f4c62ab4d35ac1a942be6346590060e8dd0b36d8687d
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcR:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfR
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_f774f400c5e0321f273d35248728e15d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-05_f774f400c5e0321f273d35248728e15d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_f774f400c5e0321f273d35248728e15d_cryptolocker
-
Size
45KB
-
MD5
f774f400c5e0321f273d35248728e15d
-
SHA1
46e6a7fba78af4b616a9db65848773a604142af5
-
SHA256
e04905389c5f4ebfacb3c7ba1d3f2dc142ecbd75db224e824a5a8139c3b15c10
-
SHA512
c0e94162fcfb03a65c2236e21c7d1c5e15a832d8acdfdc709a285e768024065731fb8493f4405808be25f4c62ab4d35ac1a942be6346590060e8dd0b36d8687d
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcR:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfR
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-