Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker
-
Size
42KB
-
Sample
240425-e5geasfc66
-
MD5
3b05b83bad2ea449253c73fc6f96d0d2
-
SHA1
260b3ffbc4a527215dd4eeb42284c6097989e01d
-
SHA256
33743ebaf50fc6aed826fac05a48d8a5f61701c73e40cb6104b45235e56f10b0
-
SHA512
5e41eca41835e59b2491079fe65a163489146abc4d928744fc9008953d9b155636e0a66715e127c8c112ff19aa81688dc1e34d2e9d78e8f02daa5da4b6114ba0
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uye/:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZL/
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker
-
Size
42KB
-
MD5
3b05b83bad2ea449253c73fc6f96d0d2
-
SHA1
260b3ffbc4a527215dd4eeb42284c6097989e01d
-
SHA256
33743ebaf50fc6aed826fac05a48d8a5f61701c73e40cb6104b45235e56f10b0
-
SHA512
5e41eca41835e59b2491079fe65a163489146abc4d928744fc9008953d9b155636e0a66715e127c8c112ff19aa81688dc1e34d2e9d78e8f02daa5da4b6114ba0
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uye/:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZL/
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-