Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker
-
Size
36KB
-
Sample
240424-2faxjsah3w
-
MD5
9973f8c2bcc0768b96f3ba05d2e3adb8
-
SHA1
4f090606cb5f909c4a71d38e436ebc8aadb6d593
-
SHA256
3b9193480a544e5b7ff72ba9a0cd92d0781324f422a94212ec9c109d5f9c41b0
-
SHA512
cde1956c41f052171b766f99dcc8568ef0114d0abe7f7af87e81c91dd52aebd90befe37911622f8490b3b76247e9e462c9ec70dff1deeee6b4de6f2db9417249
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/W:fT+hsMQMOtEvwDpjoIHe
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker
-
Size
36KB
-
MD5
9973f8c2bcc0768b96f3ba05d2e3adb8
-
SHA1
4f090606cb5f909c4a71d38e436ebc8aadb6d593
-
SHA256
3b9193480a544e5b7ff72ba9a0cd92d0781324f422a94212ec9c109d5f9c41b0
-
SHA512
cde1956c41f052171b766f99dcc8568ef0114d0abe7f7af87e81c91dd52aebd90befe37911622f8490b3b76247e9e462c9ec70dff1deeee6b4de6f2db9417249
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/W:fT+hsMQMOtEvwDpjoIHe
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-