Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker
-
Size
79KB
-
Sample
240422-k7ealshh9z
-
MD5
f73d1e5040b268b099812317b7ab99a3
-
SHA1
7a4fe71feb606352bf309d73b43a7517b6f1f596
-
SHA256
2fcb16d44e372e5237d1f1f3f694a1933a1c35051702f665b9bcf087f1c17107
-
SHA512
16f9304d36d8258ea7b0e1f1cdcbe01574c8af927bc9c9b1e84e288ee83c18bcf18b44144f7031c6509b0c81c93148130a7cdba493a0ac0161e194c98c71217c
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqH:T6a+rdOOtEvwDpjNcc
Behavioral task
behavioral1
Sample
2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker
-
Size
79KB
-
MD5
f73d1e5040b268b099812317b7ab99a3
-
SHA1
7a4fe71feb606352bf309d73b43a7517b6f1f596
-
SHA256
2fcb16d44e372e5237d1f1f3f694a1933a1c35051702f665b9bcf087f1c17107
-
SHA512
16f9304d36d8258ea7b0e1f1cdcbe01574c8af927bc9c9b1e84e288ee83c18bcf18b44144f7031c6509b0c81c93148130a7cdba493a0ac0161e194c98c71217c
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqH:T6a+rdOOtEvwDpjNcc
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-