Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-08_7734bbd1982271c9b94e3f59e99fad3b_cryptolocker
-
Size
51KB
-
Sample
240508-d3m9dsge4w
-
MD5
7734bbd1982271c9b94e3f59e99fad3b
-
SHA1
215622fd097224e101631c770fb26a27ad124c87
-
SHA256
51f74b38455ed0f1ee9e1408ce988d2d3fd732e8bdc32ee1e40648a951fc78bd
-
SHA512
45de0f1218b411550bb04a776e0d14b9612eaa353c13fca775554ab0cc8e64835e7748c39909f454cd65f7b3e51c0883605736e2fc7ab7ca23225e4aeace5d62
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaf2A:X6QFElP6n+gJBMOtEvwDpjBtExmln2A
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_7734bbd1982271c9b94e3f59e99fad3b_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-08_7734bbd1982271c9b94e3f59e99fad3b_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-08_7734bbd1982271c9b94e3f59e99fad3b_cryptolocker
-
Size
51KB
-
MD5
7734bbd1982271c9b94e3f59e99fad3b
-
SHA1
215622fd097224e101631c770fb26a27ad124c87
-
SHA256
51f74b38455ed0f1ee9e1408ce988d2d3fd732e8bdc32ee1e40648a951fc78bd
-
SHA512
45de0f1218b411550bb04a776e0d14b9612eaa353c13fca775554ab0cc8e64835e7748c39909f454cd65f7b3e51c0883605736e2fc7ab7ca23225e4aeace5d62
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaf2A:X6QFElP6n+gJBMOtEvwDpjBtExmln2A
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-