Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-08_d9b17930096dec0d3c8836ce178f6a77_cryptolocker
-
Size
41KB
-
Sample
240508-bwvzjsbc6y
-
MD5
d9b17930096dec0d3c8836ce178f6a77
-
SHA1
7cbbe99e888a3ca7cc9e8f28fd80217d2a3f48ff
-
SHA256
4d9e2fb53ef4ea4342df748df0dc6dc92391d8d660288da1dd1a54119550b3a6
-
SHA512
9ebdd936b6f49940848787c4709e486d7e883dc365a5f3249beedb5f4af42feb31d8792e6f0bc94b24c4fba37b71357fc27fa2a37293701937e5d6472e3278bb
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcSX:bgGYcA/53GADw8ClrcTcSX
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_d9b17930096dec0d3c8836ce178f6a77_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_d9b17930096dec0d3c8836ce178f6a77_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-08_d9b17930096dec0d3c8836ce178f6a77_cryptolocker
-
Size
41KB
-
MD5
d9b17930096dec0d3c8836ce178f6a77
-
SHA1
7cbbe99e888a3ca7cc9e8f28fd80217d2a3f48ff
-
SHA256
4d9e2fb53ef4ea4342df748df0dc6dc92391d8d660288da1dd1a54119550b3a6
-
SHA512
9ebdd936b6f49940848787c4709e486d7e883dc365a5f3249beedb5f4af42feb31d8792e6f0bc94b24c4fba37b71357fc27fa2a37293701937e5d6472e3278bb
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+rc5vVcSX:bgGYcA/53GADw8ClrcTcSX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-