Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-28_0d70f23183e2b5d7275617f3ad070606_cryptolocker
-
Size
92KB
-
Sample
240428-xdy45see6x
-
MD5
0d70f23183e2b5d7275617f3ad070606
-
SHA1
89d616f630fa5a0877ce10b0bbd15dc2078d9c08
-
SHA256
8fd45a9b832929055d6ed4053fd955b87001d9acdf209cf5b208ee57a06f8c96
-
SHA512
1d052aef250a7d50c2ee29c770c879dc3741aaddcdabd87ec2cc37493e3b6f9282ee9b60d1abb83d612ccdea83858eea29c30c90bac27df5f6964c2ff5e4da30
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL08:V6a+pOtEvwDpjtzP
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_0d70f23183e2b5d7275617f3ad070606_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-28_0d70f23183e2b5d7275617f3ad070606_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-28_0d70f23183e2b5d7275617f3ad070606_cryptolocker
-
Size
92KB
-
MD5
0d70f23183e2b5d7275617f3ad070606
-
SHA1
89d616f630fa5a0877ce10b0bbd15dc2078d9c08
-
SHA256
8fd45a9b832929055d6ed4053fd955b87001d9acdf209cf5b208ee57a06f8c96
-
SHA512
1d052aef250a7d50c2ee29c770c879dc3741aaddcdabd87ec2cc37493e3b6f9282ee9b60d1abb83d612ccdea83858eea29c30c90bac27df5f6964c2ff5e4da30
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgL08:V6a+pOtEvwDpjtzP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-