Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-24_cadd61fd812d190ca5fdec881ca7f5c9_cryptolocker
-
Size
64KB
-
Sample
240424-s1za7scf4w
-
MD5
cadd61fd812d190ca5fdec881ca7f5c9
-
SHA1
b8b6f5a94d7c1fd59fde3928149c99107d89a2ae
-
SHA256
6c5b089c49f996f9a35bccc58e1783dcefa6db175f1740ae15d7abcdb54334be
-
SHA512
b8502f68c038ef61b6d4eac2b3bc83e7e311e226191d1e75c016d1729734274aa9966f01f1b75354fc4e57247ddb119167191d5c4d6b2adffb20cde27224e04a
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoU:X6a+SOtEvwDpjBrOV
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-24_cadd61fd812d190ca5fdec881ca7f5c9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-24_cadd61fd812d190ca5fdec881ca7f5c9_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-24_cadd61fd812d190ca5fdec881ca7f5c9_cryptolocker
-
Size
64KB
-
MD5
cadd61fd812d190ca5fdec881ca7f5c9
-
SHA1
b8b6f5a94d7c1fd59fde3928149c99107d89a2ae
-
SHA256
6c5b089c49f996f9a35bccc58e1783dcefa6db175f1740ae15d7abcdb54334be
-
SHA512
b8502f68c038ef61b6d4eac2b3bc83e7e311e226191d1e75c016d1729734274aa9966f01f1b75354fc4e57247ddb119167191d5c4d6b2adffb20cde27224e04a
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoU:X6a+SOtEvwDpjBrOV
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-