Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-11_127db1c95b865f60acd3c31541fe3f5d_cryptolocker
-
Size
84KB
-
Sample
240411-dyy54aba64
-
MD5
127db1c95b865f60acd3c31541fe3f5d
-
SHA1
418a3a0c333c0f7d47f71238edc19e7057237581
-
SHA256
2e605f03af7eda9334758610937421ca7c54c8ad015a95847670f99dc2fcdbcf
-
SHA512
24b0fd0870f4e6984b474e101d3ef0cae07b99f52dccbd1a710571322ed1cf30a47b70f1af0ec110470c09c1761e81490a9991aa0d762e6dda4a7247ecfcbc88
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7vM5RQ:T6a+rdOOtEvwDpjNV
Behavioral task
behavioral1
Sample
2024-04-11_127db1c95b865f60acd3c31541fe3f5d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-11_127db1c95b865f60acd3c31541fe3f5d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-11_127db1c95b865f60acd3c31541fe3f5d_cryptolocker
-
Size
84KB
-
MD5
127db1c95b865f60acd3c31541fe3f5d
-
SHA1
418a3a0c333c0f7d47f71238edc19e7057237581
-
SHA256
2e605f03af7eda9334758610937421ca7c54c8ad015a95847670f99dc2fcdbcf
-
SHA512
24b0fd0870f4e6984b474e101d3ef0cae07b99f52dccbd1a710571322ed1cf30a47b70f1af0ec110470c09c1761e81490a9991aa0d762e6dda4a7247ecfcbc88
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7vM5RQ:T6a+rdOOtEvwDpjNV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-