Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker
-
Size
41KB
-
Sample
240428-nj6lqsef29
-
MD5
1c0ba3fecb4fce6c0e4ee9bc43e9fb5e
-
SHA1
f1e17181bc011eccd9dd743f25b4e08365df65c6
-
SHA256
2e7f3b77a9ca84c90a8e849b92a9001342725a456df28b56b8a7dc4152936a0c
-
SHA512
9b59eff7d9802bcb5aaad66db3e3fffda809b89ccd1aa2e13f8bc450b998c71afb6a61bbaa06b847bf6b82893d69d94f7abc10319b3f162a0cb3c1ed4e7ebab7
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jc:bAvJCF+RQgJeab4sy/lu
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker
-
Size
41KB
-
MD5
1c0ba3fecb4fce6c0e4ee9bc43e9fb5e
-
SHA1
f1e17181bc011eccd9dd743f25b4e08365df65c6
-
SHA256
2e7f3b77a9ca84c90a8e849b92a9001342725a456df28b56b8a7dc4152936a0c
-
SHA512
9b59eff7d9802bcb5aaad66db3e3fffda809b89ccd1aa2e13f8bc450b998c71afb6a61bbaa06b847bf6b82893d69d94f7abc10319b3f162a0cb3c1ed4e7ebab7
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jc:bAvJCF+RQgJeab4sy/lu
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-