Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-01_4f5207feb7eccb1adeaa107269df8244_cryptolocker
-
Size
72KB
-
Sample
240501-erzcyshf35
-
MD5
4f5207feb7eccb1adeaa107269df8244
-
SHA1
ada94e48f91aab111f9ee5461baeeae07fe063d6
-
SHA256
9585642d7f78ee74bd1d9ec7640f1bfebed164cbc6cda690ffea1f30f8fed1d7
-
SHA512
abc894abfdf37309d08f4363be34473c73fbf10e5471eeb265d89d1c568fa4201a910c4eba6b6b0d4a04868e3eb223fc44b7c1cc7924b8a86b60b84ffa653d2c
-
SSDEEP
1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9m:C4Q2c94OtEvwDpj4H8zz
Behavioral task
behavioral1
Sample
2024-05-01_4f5207feb7eccb1adeaa107269df8244_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-01_4f5207feb7eccb1adeaa107269df8244_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_4f5207feb7eccb1adeaa107269df8244_cryptolocker
-
Size
72KB
-
MD5
4f5207feb7eccb1adeaa107269df8244
-
SHA1
ada94e48f91aab111f9ee5461baeeae07fe063d6
-
SHA256
9585642d7f78ee74bd1d9ec7640f1bfebed164cbc6cda690ffea1f30f8fed1d7
-
SHA512
abc894abfdf37309d08f4363be34473c73fbf10e5471eeb265d89d1c568fa4201a910c4eba6b6b0d4a04868e3eb223fc44b7c1cc7924b8a86b60b84ffa653d2c
-
SSDEEP
1536:nj+4zs2cPVhlMOtEvwDpj4H8u8rZVTs9m:C4Q2c94OtEvwDpj4H8zz
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-