Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-11_d9ccf735a696896f0dc66ab57a607344_cryptolocker
-
Size
45KB
-
Sample
240411-egdcqseg4s
-
MD5
d9ccf735a696896f0dc66ab57a607344
-
SHA1
9c7dc51bc4dac88772c019f2ea228b6403cc5e46
-
SHA256
ac987cd1afffbd4f6571db3acdf3ab59f1210435b6e097d0b8750d96115b172e
-
SHA512
75826679909a30a5b6d3e775e3ebcf573eac4dc791672f8eeb5fc6d964b77e76b7697bdf82d450abc5bf558e37419c49f1532418487a951d97cd5173d1c845e9
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkK:P6Q0ElP6G+gJQMOtEvwDpjB8WMlN
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-11_d9ccf735a696896f0dc66ab57a607344_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-11_d9ccf735a696896f0dc66ab57a607344_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-11_d9ccf735a696896f0dc66ab57a607344_cryptolocker
-
Size
45KB
-
MD5
d9ccf735a696896f0dc66ab57a607344
-
SHA1
9c7dc51bc4dac88772c019f2ea228b6403cc5e46
-
SHA256
ac987cd1afffbd4f6571db3acdf3ab59f1210435b6e097d0b8750d96115b172e
-
SHA512
75826679909a30a5b6d3e775e3ebcf573eac4dc791672f8eeb5fc6d964b77e76b7697bdf82d450abc5bf558e37419c49f1532418487a951d97cd5173d1c845e9
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkK:P6Q0ElP6G+gJQMOtEvwDpjB8WMlN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-