Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-23_e58d32d7e44c73debba1ae10791474f4_cryptolocker
-
Size
42KB
-
Sample
240423-ej2s4scf89
-
MD5
e58d32d7e44c73debba1ae10791474f4
-
SHA1
ddb9c924d5dae6187933d7500299d1bd10583cf2
-
SHA256
4f1531a801c28cd32563c52ece08aa900f774bfe9e8f831a272e203343b71312
-
SHA512
94e473035a9dc822a98208f2bed6f6e9c424830a1e25c44d0f6df580b908be3d992d0b42304dbe8559640d7f2a3c6069fdcdd24fc7e54724b816a731a7c94bfc
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIR:bCDOw9aMDooc+vAs
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_e58d32d7e44c73debba1ae10791474f4_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-23_e58d32d7e44c73debba1ae10791474f4_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-23_e58d32d7e44c73debba1ae10791474f4_cryptolocker
-
Size
42KB
-
MD5
e58d32d7e44c73debba1ae10791474f4
-
SHA1
ddb9c924d5dae6187933d7500299d1bd10583cf2
-
SHA256
4f1531a801c28cd32563c52ece08aa900f774bfe9e8f831a272e203343b71312
-
SHA512
94e473035a9dc822a98208f2bed6f6e9c424830a1e25c44d0f6df580b908be3d992d0b42304dbe8559640d7f2a3c6069fdcdd24fc7e54724b816a731a7c94bfc
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAIR:bCDOw9aMDooc+vAs
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-