Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-09_1549b492774b17f0e7b565d94c1ecc8c_cryptolocker
-
Size
54KB
-
Sample
240409-d2pe3agg2w
-
MD5
1549b492774b17f0e7b565d94c1ecc8c
-
SHA1
186062e260ce03fe6e6c6df1e321d60f3f1b325c
-
SHA256
1aad327033e01ce8c14231a9bee884da55b390f6bbbf9f809e9785056a25600b
-
SHA512
e46ee1982a993ae650de0460b1f5be75f56f09f7584ca4c109a78de1776183754ca71617801ea81c72bfdb665ad1715aad5f785b5e95ef2bb97b6d07b39f2e4b
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LJb5:X6QFElP6n+gJBMOtEvwDpjBtE1yILJF
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-09_1549b492774b17f0e7b565d94c1ecc8c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-09_1549b492774b17f0e7b565d94c1ecc8c_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-09_1549b492774b17f0e7b565d94c1ecc8c_cryptolocker
-
Size
54KB
-
MD5
1549b492774b17f0e7b565d94c1ecc8c
-
SHA1
186062e260ce03fe6e6c6df1e321d60f3f1b325c
-
SHA256
1aad327033e01ce8c14231a9bee884da55b390f6bbbf9f809e9785056a25600b
-
SHA512
e46ee1982a993ae650de0460b1f5be75f56f09f7584ca4c109a78de1776183754ca71617801ea81c72bfdb665ad1715aad5f785b5e95ef2bb97b6d07b39f2e4b
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LJb5:X6QFElP6n+gJBMOtEvwDpjBtE1yILJF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-