Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-08_ade34cbc85693485a2edaacd2c0a7c6b_cryptolocker
-
Size
36KB
-
Sample
240508-fdmmnsbd8y
-
MD5
ade34cbc85693485a2edaacd2c0a7c6b
-
SHA1
396c2a8964bed88052f26c167b00b9fc376d2b95
-
SHA256
259b0cb08bbcc0953fe57c90521d60af1ba4d51ee5ae0d87cfacf76edaed4679
-
SHA512
0d9a83169d67a88de88095cc67fc212f6c886bf25b8d3b9237e63987d836920ad65f5d51fef60e84074bed64e43229d2c1df01a4afc59062c9e57a19cea76532
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDq:bAvJCF+RQgJeab4sb+
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_ade34cbc85693485a2edaacd2c0a7c6b_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-08_ade34cbc85693485a2edaacd2c0a7c6b_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-05-08_ade34cbc85693485a2edaacd2c0a7c6b_cryptolocker
-
Size
36KB
-
MD5
ade34cbc85693485a2edaacd2c0a7c6b
-
SHA1
396c2a8964bed88052f26c167b00b9fc376d2b95
-
SHA256
259b0cb08bbcc0953fe57c90521d60af1ba4d51ee5ae0d87cfacf76edaed4679
-
SHA512
0d9a83169d67a88de88095cc67fc212f6c886bf25b8d3b9237e63987d836920ad65f5d51fef60e84074bed64e43229d2c1df01a4afc59062c9e57a19cea76532
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3pQheDq:bAvJCF+RQgJeab4sb+
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-