Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker
-
Size
45KB
-
Sample
240425-qryl7sbc38
-
MD5
aa3d4bc4abed726b03ba43f51fcf572e
-
SHA1
492ba74d8ed959a70b3bf8867084855532974a7c
-
SHA256
ee4f585baa124a5c4a84ea83c04663970570029d43747c1ad0e29ead91772d5e
-
SHA512
393df9eb79aa86e9d27695c36b90e57fe6eb5c2cb4b8629e25945b25d87df3f573b84c39a7f2eda5bd1c4978673b8304c31da8c1b7c56d1bc8c0f68b8c850d9d
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPND:P6QFElP6k+MRQMOtEvwDpjBQpVXED
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker
-
Size
45KB
-
MD5
aa3d4bc4abed726b03ba43f51fcf572e
-
SHA1
492ba74d8ed959a70b3bf8867084855532974a7c
-
SHA256
ee4f585baa124a5c4a84ea83c04663970570029d43747c1ad0e29ead91772d5e
-
SHA512
393df9eb79aa86e9d27695c36b90e57fe6eb5c2cb4b8629e25945b25d87df3f573b84c39a7f2eda5bd1c4978673b8304c31da8c1b7c56d1bc8c0f68b8c850d9d
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPND:P6QFElP6k+MRQMOtEvwDpjBQpVXED
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-