Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-26_b529dda68267c8c7e54c9d95a3874ca2_cryptolocker
-
Size
36KB
-
Sample
240426-1b69hsdd5w
-
MD5
b529dda68267c8c7e54c9d95a3874ca2
-
SHA1
303af6ad212c31677c773394887dfea37332be54
-
SHA256
495743f93bb07b58f5c1a64e5f746e164b7c3fa7b2899c47baade6350f956788
-
SHA512
015bb0c69c573448bcb09c3f49a07b103ad309bf2f2c14ed57093c4ccdf097b45b80fef7e571265ea95acee772437b22113d27afacdf808ca8d7cbae9e9dc60f
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+40:fT+hsMQMOtEvwDpjoIH0
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_b529dda68267c8c7e54c9d95a3874ca2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_b529dda68267c8c7e54c9d95a3874ca2_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_b529dda68267c8c7e54c9d95a3874ca2_cryptolocker
-
Size
36KB
-
MD5
b529dda68267c8c7e54c9d95a3874ca2
-
SHA1
303af6ad212c31677c773394887dfea37332be54
-
SHA256
495743f93bb07b58f5c1a64e5f746e164b7c3fa7b2899c47baade6350f956788
-
SHA512
015bb0c69c573448bcb09c3f49a07b103ad309bf2f2c14ed57093c4ccdf097b45b80fef7e571265ea95acee772437b22113d27afacdf808ca8d7cbae9e9dc60f
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+40:fT+hsMQMOtEvwDpjoIH0
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-