Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-07_a3f11b144b7866c28357f53466040a96_cryptolocker
-
Size
75KB
-
Sample
240507-d9wjcabd89
-
MD5
a3f11b144b7866c28357f53466040a96
-
SHA1
e48eaaa6872249551125fefbe593388ff37eb3d1
-
SHA256
3b5fe979adcf3882fec5e405eedeca57f53548beb5720bc793e8f5154a41b040
-
SHA512
71bb4f01266b8c4f52dd717b3a84e67179ee2a9b86121e9a9dfe0f42b35d2d007b751c21a0ec110127443d591808c6ab5d9191daf95bc3a2f11c2a1ce1363336
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoU:X6a+SOtEvwDpjBZYvQd2y
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_a3f11b144b7866c28357f53466040a96_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-07_a3f11b144b7866c28357f53466040a96_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-07_a3f11b144b7866c28357f53466040a96_cryptolocker
-
Size
75KB
-
MD5
a3f11b144b7866c28357f53466040a96
-
SHA1
e48eaaa6872249551125fefbe593388ff37eb3d1
-
SHA256
3b5fe979adcf3882fec5e405eedeca57f53548beb5720bc793e8f5154a41b040
-
SHA512
71bb4f01266b8c4f52dd717b3a84e67179ee2a9b86121e9a9dfe0f42b35d2d007b751c21a0ec110127443d591808c6ab5d9191daf95bc3a2f11c2a1ce1363336
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoU:X6a+SOtEvwDpjBZYvQd2y
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-