Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-19_f64d59276253d5b0cb14c5fc5f20324f_cryptolocker
-
Size
36KB
-
Sample
240419-scx38sfc42
-
MD5
f64d59276253d5b0cb14c5fc5f20324f
-
SHA1
353a98582b8c48ed77b8184bf1fb870b5f79b733
-
SHA256
e64af25ed3ba04835c9945ded0de838be861e458fc2d754b1230c949b574e979
-
SHA512
5ba3d355d6da2108ba6d41c0d58ec98d66d92bc0334a46ef878e9a1bf119ac36dd1c38460b47f27a646a464d05b21200ba4dfb914f183d1547662ba89d508453
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mS:bc/y2lLRU6zA6qS
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-19_f64d59276253d5b0cb14c5fc5f20324f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-19_f64d59276253d5b0cb14c5fc5f20324f_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-19_f64d59276253d5b0cb14c5fc5f20324f_cryptolocker
-
Size
36KB
-
MD5
f64d59276253d5b0cb14c5fc5f20324f
-
SHA1
353a98582b8c48ed77b8184bf1fb870b5f79b733
-
SHA256
e64af25ed3ba04835c9945ded0de838be861e458fc2d754b1230c949b574e979
-
SHA512
5ba3d355d6da2108ba6d41c0d58ec98d66d92bc0334a46ef878e9a1bf119ac36dd1c38460b47f27a646a464d05b21200ba4dfb914f183d1547662ba89d508453
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mS:bc/y2lLRU6zA6qS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-