Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-15_3720cf57d16e0c2409d49ee40f21c545_cryptolocker
-
Size
45KB
-
Sample
240415-rwqmtsah5s
-
MD5
3720cf57d16e0c2409d49ee40f21c545
-
SHA1
a63a9bb86e13c93a9425d06fd6ea1057675095b6
-
SHA256
6484dfbc33104b13044eae024a4c9f56a308fce620c5c31afa8354a32f8a85aa
-
SHA512
75b3a881f1377f19c822136f4a3bac97235203a6f66c7c7f162eac44a4696f36c950a2907b1211fedefb3a75745b1737cb7de4a77d1362c2417b68f206dbf8b2
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuj2e:vj+jsMQMOtEvwDpj5Hczer5ixjn
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_3720cf57d16e0c2409d49ee40f21c545_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-15_3720cf57d16e0c2409d49ee40f21c545_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-15_3720cf57d16e0c2409d49ee40f21c545_cryptolocker
-
Size
45KB
-
MD5
3720cf57d16e0c2409d49ee40f21c545
-
SHA1
a63a9bb86e13c93a9425d06fd6ea1057675095b6
-
SHA256
6484dfbc33104b13044eae024a4c9f56a308fce620c5c31afa8354a32f8a85aa
-
SHA512
75b3a881f1377f19c822136f4a3bac97235203a6f66c7c7f162eac44a4696f36c950a2907b1211fedefb3a75745b1737cb7de4a77d1362c2417b68f206dbf8b2
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuj2e:vj+jsMQMOtEvwDpj5Hczer5ixjn
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-