Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-16_299e1d3822830f70feae0b15874def67_cryptolocker
-
Size
38KB
-
Sample
240416-a2173scg35
-
MD5
299e1d3822830f70feae0b15874def67
-
SHA1
929745cbd888a5ca980d46c903d73ff37b006e3b
-
SHA256
d641b0f3944449c7e5d5a930ac0b9908ca371a6ceb75ac31b19d170b75509cf7
-
SHA512
66ff1808f6cbb94462a62d8e79bd2dd51e8b0b3936a5ae748da49eccbbfa27b3fe57e1b0ed216eef7e1cd07517caa5eb26cc26b206fa750243a72b7694ff6f8a
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hh:bA6YcA/X6G0W143B
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_299e1d3822830f70feae0b15874def67_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_299e1d3822830f70feae0b15874def67_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_299e1d3822830f70feae0b15874def67_cryptolocker
-
Size
38KB
-
MD5
299e1d3822830f70feae0b15874def67
-
SHA1
929745cbd888a5ca980d46c903d73ff37b006e3b
-
SHA256
d641b0f3944449c7e5d5a930ac0b9908ca371a6ceb75ac31b19d170b75509cf7
-
SHA512
66ff1808f6cbb94462a62d8e79bd2dd51e8b0b3936a5ae748da49eccbbfa27b3fe57e1b0ed216eef7e1cd07517caa5eb26cc26b206fa750243a72b7694ff6f8a
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hh:bA6YcA/X6G0W143B
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-