Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-27_2419ca9af5e8c90edb7924544b2cc7ba_cryptolocker
-
Size
74KB
-
Sample
240427-w33yysea74
-
MD5
2419ca9af5e8c90edb7924544b2cc7ba
-
SHA1
bf52bf6f9129cc3fae94998494af58e291cb15da
-
SHA256
e70ccb4a2cbc12f4ca8a3031bb5511e15c8fcde3ac5d9cd133a212ff02622195
-
SHA512
a2df12a30facb7ca2e0f44f2d962f74d79c1e6714cca481581cb1a0df4f75b32d2ee8ebe71c2b1759ef675a5aa7da06d9236bfc57f6d04900df2fff0ee6b52d5
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsw:X6a+SOtEvwDpjBZYvQd2f
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_2419ca9af5e8c90edb7924544b2cc7ba_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_2419ca9af5e8c90edb7924544b2cc7ba_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_2419ca9af5e8c90edb7924544b2cc7ba_cryptolocker
-
Size
74KB
-
MD5
2419ca9af5e8c90edb7924544b2cc7ba
-
SHA1
bf52bf6f9129cc3fae94998494af58e291cb15da
-
SHA256
e70ccb4a2cbc12f4ca8a3031bb5511e15c8fcde3ac5d9cd133a212ff02622195
-
SHA512
a2df12a30facb7ca2e0f44f2d962f74d79c1e6714cca481581cb1a0df4f75b32d2ee8ebe71c2b1759ef675a5aa7da06d9236bfc57f6d04900df2fff0ee6b52d5
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsw:X6a+SOtEvwDpjBZYvQd2f
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-