Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-17_599c093fc60f8ebfb2c83d2a8572ceeb_cryptolocker
-
Size
38KB
-
Sample
240417-eawkqsec7z
-
MD5
599c093fc60f8ebfb2c83d2a8572ceeb
-
SHA1
4273eab410a394ad051fdb4e159b151d4e64b008
-
SHA256
7be442b58f7e3a44a8b40709e9cd8ee1f2ea55e1f6b2e4676baa157bdff38b66
-
SHA512
25646caa75af4d9cd1bafec9b03e98a0a37f1e96f4ade96ef25116078146ba1c93278b5c8d4187f8b11181fc182841f4a048a09e9f90ecaee5b72f02c5090dbb
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpz:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLN
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_599c093fc60f8ebfb2c83d2a8572ceeb_cryptolocker.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-17_599c093fc60f8ebfb2c83d2a8572ceeb_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-17_599c093fc60f8ebfb2c83d2a8572ceeb_cryptolocker
-
Size
38KB
-
MD5
599c093fc60f8ebfb2c83d2a8572ceeb
-
SHA1
4273eab410a394ad051fdb4e159b151d4e64b008
-
SHA256
7be442b58f7e3a44a8b40709e9cd8ee1f2ea55e1f6b2e4676baa157bdff38b66
-
SHA512
25646caa75af4d9cd1bafec9b03e98a0a37f1e96f4ade96ef25116078146ba1c93278b5c8d4187f8b11181fc182841f4a048a09e9f90ecaee5b72f02c5090dbb
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpz:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-