Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker
-
Size
75KB
-
Sample
240509-rw458aee51
-
MD5
3a85d7b4f3c831d1246a57a853a8e5cf
-
SHA1
ab255b1e8cc3027e1a34aaba88b08052bf342b35
-
SHA256
74a688f2c1dab558d14a5b8b2e2b6f2ca68c94ff53fe680966c2b8fdf5d82045
-
SHA512
453672435bfb9d421cf1e516c5be282224d3522b3a27e06b4e166538f699ada9d5fbd9f5ac93096cece51ee02b6545bc61f8c44000cf8532cdb734cc85fa8353
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkR:X6a+SOtEvwDpjBZYvQd2q
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker
-
Size
75KB
-
MD5
3a85d7b4f3c831d1246a57a853a8e5cf
-
SHA1
ab255b1e8cc3027e1a34aaba88b08052bf342b35
-
SHA256
74a688f2c1dab558d14a5b8b2e2b6f2ca68c94ff53fe680966c2b8fdf5d82045
-
SHA512
453672435bfb9d421cf1e516c5be282224d3522b3a27e06b4e166538f699ada9d5fbd9f5ac93096cece51ee02b6545bc61f8c44000cf8532cdb734cc85fa8353
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkR:X6a+SOtEvwDpjBZYvQd2q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-