Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-18_334ca667c828447e43dcce0592849bd6_cryptolocker
-
Size
84KB
-
Sample
240418-jcwezaeh42
-
MD5
334ca667c828447e43dcce0592849bd6
-
SHA1
8f3cd91591b175c6faa2df80e1688d9e5b065507
-
SHA256
4b2e8d007eca5352f8635d4949e05737a5a43b9bee4dcaa7b805a454bd2ff56c
-
SHA512
ce4cac0b78c7d9f59e8d7b7a288c3e4256b1c4a1c689e779ad357632f53905d43c1d9d5c80e2bd84e77c09f7476b176318f2b6ee77413faff9eb6698ea4ac23f
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnY0:V6QFElP6n+gMQMOtEvwDpjyaLccVNl60
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-18_334ca667c828447e43dcce0592849bd6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-18_334ca667c828447e43dcce0592849bd6_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-18_334ca667c828447e43dcce0592849bd6_cryptolocker
-
Size
84KB
-
MD5
334ca667c828447e43dcce0592849bd6
-
SHA1
8f3cd91591b175c6faa2df80e1688d9e5b065507
-
SHA256
4b2e8d007eca5352f8635d4949e05737a5a43b9bee4dcaa7b805a454bd2ff56c
-
SHA512
ce4cac0b78c7d9f59e8d7b7a288c3e4256b1c4a1c689e779ad357632f53905d43c1d9d5c80e2bd84e77c09f7476b176318f2b6ee77413faff9eb6698ea4ac23f
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnY0:V6QFElP6n+gMQMOtEvwDpjyaLccVNl60
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-