Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-10_c2ecd339d6dfdfebce9117cf2ccb76b4_cryptolocker
-
Size
99KB
-
Sample
240410-2gj7lsdb74
-
MD5
c2ecd339d6dfdfebce9117cf2ccb76b4
-
SHA1
08c88307ecc5c82a8b6bb0b1d21aa7f72f7b26f7
-
SHA256
43fff992c887b335fa45223ea47aa37d58acb0314ff1ffa2586c21989cbbdfe8
-
SHA512
8d6b77a4225532afeec60e467be14605b5586eba54d18fed227bf7484da0a7021c071bf5ebb2b7e328ebf5a6a6f5b62eee549746c6f0486fe125560b5b07f491
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwh:26a+2OtEvwDpjtzm
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_c2ecd339d6dfdfebce9117cf2ccb76b4_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_c2ecd339d6dfdfebce9117cf2ccb76b4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_c2ecd339d6dfdfebce9117cf2ccb76b4_cryptolocker
-
Size
99KB
-
MD5
c2ecd339d6dfdfebce9117cf2ccb76b4
-
SHA1
08c88307ecc5c82a8b6bb0b1d21aa7f72f7b26f7
-
SHA256
43fff992c887b335fa45223ea47aa37d58acb0314ff1ffa2586c21989cbbdfe8
-
SHA512
8d6b77a4225532afeec60e467be14605b5586eba54d18fed227bf7484da0a7021c071bf5ebb2b7e328ebf5a6a6f5b62eee549746c6f0486fe125560b5b07f491
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwh:26a+2OtEvwDpjtzm
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-