Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-01_6a3c9cf37807f1b8022691ee853e99e3_cryptolocker
-
Size
43KB
-
Sample
240501-pry3aseh5w
-
MD5
6a3c9cf37807f1b8022691ee853e99e3
-
SHA1
e4ca30f6f0d4e4d42a15f6532b8027805e344326
-
SHA256
aadba286df38c1db19116df6677e873005ebb21c24241b7a8fc34d589fe1d00a
-
SHA512
1d4d92f4e955f8326f01bc5d2b17aa9ba7faee9f927e7c99a8967793bdfb33fd8400f15e006e04a9dc2ba62ee4c87c2d2e5288eb8841dd89092e007b04adb19b
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAJ:b/pYayGig5HjS3NPAJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-01_6a3c9cf37807f1b8022691ee853e99e3_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-01_6a3c9cf37807f1b8022691ee853e99e3_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-01_6a3c9cf37807f1b8022691ee853e99e3_cryptolocker
-
Size
43KB
-
MD5
6a3c9cf37807f1b8022691ee853e99e3
-
SHA1
e4ca30f6f0d4e4d42a15f6532b8027805e344326
-
SHA256
aadba286df38c1db19116df6677e873005ebb21c24241b7a8fc34d589fe1d00a
-
SHA512
1d4d92f4e955f8326f01bc5d2b17aa9ba7faee9f927e7c99a8967793bdfb33fd8400f15e006e04a9dc2ba62ee4c87c2d2e5288eb8841dd89092e007b04adb19b
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PAJ:b/pYayGig5HjS3NPAJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-