Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker
-
Size
45KB
-
Sample
240430-fc6zxscf63
-
MD5
4932bb0b3097cdc77901dc9aa8248f5c
-
SHA1
39797b9fb7b79a25d276e2ad0a9e92413785d880
-
SHA256
0e131ed6555068513035088fd0a25944f2f0daec2428b40f9cdfda232dc718d9
-
SHA512
c4b35bef38059ae9e12fdc84628d282f4269b819378cbfaba8131ad687ad9c4bdbf60341f567f9035d40df2a6638e106f8f45a2c9566d0f3f0121b6cf47e10fa
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsE:V6QFElP6n+gMQMOtEvwDpjyaYaFAh33
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker
-
Size
45KB
-
MD5
4932bb0b3097cdc77901dc9aa8248f5c
-
SHA1
39797b9fb7b79a25d276e2ad0a9e92413785d880
-
SHA256
0e131ed6555068513035088fd0a25944f2f0daec2428b40f9cdfda232dc718d9
-
SHA512
c4b35bef38059ae9e12fdc84628d282f4269b819378cbfaba8131ad687ad9c4bdbf60341f567f9035d40df2a6638e106f8f45a2c9566d0f3f0121b6cf47e10fa
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsE:V6QFElP6n+gMQMOtEvwDpjyaYaFAh33
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-