Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker
-
Size
37KB
-
Sample
240504-tjeqxade99
-
MD5
bdc308c547feeaa55cfc2c912f7331c2
-
SHA1
dcc3f914fa61d57856cfb71a3ed35836830837f8
-
SHA256
c36eb5b4f24c65bce2684cd6b8837439a70f08c209afab784d8bfa91a7f937a0
-
SHA512
0b9b5c37403f0150ae3729e618b938aeb7eb4cf57ddc0250e599f398d622bdd0fa19a80c722bb6462b2de0405ecbc1a6d9274a1ec6cdbccab9daee3ba76155fd
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluhn:bAvJCYOOvbRPDEgXRc3SSz3SPS
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker
-
Size
37KB
-
MD5
bdc308c547feeaa55cfc2c912f7331c2
-
SHA1
dcc3f914fa61d57856cfb71a3ed35836830837f8
-
SHA256
c36eb5b4f24c65bce2684cd6b8837439a70f08c209afab784d8bfa91a7f937a0
-
SHA512
0b9b5c37403f0150ae3729e618b938aeb7eb4cf57ddc0250e599f398d622bdd0fa19a80c722bb6462b2de0405ecbc1a6d9274a1ec6cdbccab9daee3ba76155fd
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluhn:bAvJCYOOvbRPDEgXRc3SSz3SPS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-