Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-21_f1dcbe6a90fe3fd9e8ed08f72d50f09e_cryptolocker
-
Size
39KB
-
Sample
240421-fcf4habg7x
-
MD5
f1dcbe6a90fe3fd9e8ed08f72d50f09e
-
SHA1
caacaefe77e2e10527e3f2d632a52a60295e08da
-
SHA256
c1eb02f5ae27591cf35bc4d1a3fa1c1c5a2850ca322c0fbb6a761e17b01ce76c
-
SHA512
61be6082a9d24482efef1e346f439d70a14d619363d92e3473a225af70a48c4766fcec563f26d13a910f51bc0e6c70dc3a5b718e649b2a0092dbd36f41cb6f7b
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWR:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLA
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-21_f1dcbe6a90fe3fd9e8ed08f72d50f09e_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-21_f1dcbe6a90fe3fd9e8ed08f72d50f09e_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-21_f1dcbe6a90fe3fd9e8ed08f72d50f09e_cryptolocker
-
Size
39KB
-
MD5
f1dcbe6a90fe3fd9e8ed08f72d50f09e
-
SHA1
caacaefe77e2e10527e3f2d632a52a60295e08da
-
SHA256
c1eb02f5ae27591cf35bc4d1a3fa1c1c5a2850ca322c0fbb6a761e17b01ce76c
-
SHA512
61be6082a9d24482efef1e346f439d70a14d619363d92e3473a225af70a48c4766fcec563f26d13a910f51bc0e6c70dc3a5b718e649b2a0092dbd36f41cb6f7b
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWR:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLA
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-