Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-27_6a617032c916f98522e30be47fb55403_cryptolocker
-
Size
87KB
-
Sample
240427-w6a3caea92
-
MD5
6a617032c916f98522e30be47fb55403
-
SHA1
d08df245e23d7972383574bc47c8118d84bf3b39
-
SHA256
82c3359af10292ed00e6e49846787e1b9cc0d7275e84266caea85541b69644b4
-
SHA512
f5ebe7a59afd716cdfbf9f5e2f54307249d32d5ae89946f331031f0739e17cc247b4d1b7c2b30ae5ff5f88be18125a2c7ab1773436130537d8eaef227a1bae13
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIOD1:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7
Behavioral task
behavioral1
Sample
2024-04-27_6a617032c916f98522e30be47fb55403_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_6a617032c916f98522e30be47fb55403_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_6a617032c916f98522e30be47fb55403_cryptolocker
-
Size
87KB
-
MD5
6a617032c916f98522e30be47fb55403
-
SHA1
d08df245e23d7972383574bc47c8118d84bf3b39
-
SHA256
82c3359af10292ed00e6e49846787e1b9cc0d7275e84266caea85541b69644b4
-
SHA512
f5ebe7a59afd716cdfbf9f5e2f54307249d32d5ae89946f331031f0739e17cc247b4d1b7c2b30ae5ff5f88be18125a2c7ab1773436130537d8eaef227a1bae13
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIOD1:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-