Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-27_c176987173c76b0bc646c8d52d663c01_cryptolocker
-
Size
51KB
-
Sample
240427-hdxhzsdg6s
-
MD5
c176987173c76b0bc646c8d52d663c01
-
SHA1
a10e2415ddbcc3fa3919c6cfb2b26e35eef1cb03
-
SHA256
6f555b61a7e4ac9d9d12a93524e18a6f8f92609820f3f53c7e59db0bd6974a48
-
SHA512
bddf49b27fd15d97b8702e9c5dcd100c64a8b9c2c031aa7541bac05e4758cb5b651de5bbb756ca693ec2d275dbf5ab7c426f9660715041216b9f4f5abe87ad57
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTs:X6QFElP6n+gJBMOtEvwDpjBtExmlA
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_c176987173c76b0bc646c8d52d663c01_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_c176987173c76b0bc646c8d52d663c01_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-27_c176987173c76b0bc646c8d52d663c01_cryptolocker
-
Size
51KB
-
MD5
c176987173c76b0bc646c8d52d663c01
-
SHA1
a10e2415ddbcc3fa3919c6cfb2b26e35eef1cb03
-
SHA256
6f555b61a7e4ac9d9d12a93524e18a6f8f92609820f3f53c7e59db0bd6974a48
-
SHA512
bddf49b27fd15d97b8702e9c5dcd100c64a8b9c2c031aa7541bac05e4758cb5b651de5bbb756ca693ec2d275dbf5ab7c426f9660715041216b9f4f5abe87ad57
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTs:X6QFElP6n+gJBMOtEvwDpjBtExmlA
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-