Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-05_556aa1105c14171e657950fb5754c112_cryptolocker
-
Size
44KB
-
Sample
240505-jmycbabe61
-
MD5
556aa1105c14171e657950fb5754c112
-
SHA1
857e5a271aa82c183b5bbf577913e2942d6e20e7
-
SHA256
b7c7ebd93f579b6816e2bc8c251c60989f50c9c9f8763e17e6cd1cf093f236bc
-
SHA512
efc496101dc633cce7edbb918e642607099537905fcf1452c130b0dd7853c59ee11d2f624053a4921afa9aa2fcae7705bbc9720553bf1f660de30f738c9a08a6
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx0:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XF
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-05_556aa1105c14171e657950fb5754c112_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-05_556aa1105c14171e657950fb5754c112_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-05_556aa1105c14171e657950fb5754c112_cryptolocker
-
Size
44KB
-
MD5
556aa1105c14171e657950fb5754c112
-
SHA1
857e5a271aa82c183b5bbf577913e2942d6e20e7
-
SHA256
b7c7ebd93f579b6816e2bc8c251c60989f50c9c9f8763e17e6cd1cf093f236bc
-
SHA512
efc496101dc633cce7edbb918e642607099537905fcf1452c130b0dd7853c59ee11d2f624053a4921afa9aa2fcae7705bbc9720553bf1f660de30f738c9a08a6
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx0:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-