Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-09_4cd3b36fc83a6644dba510ca1a744bdb_cryptolocker
-
Size
34KB
-
Sample
240509-xqbjlsda96
-
MD5
4cd3b36fc83a6644dba510ca1a744bdb
-
SHA1
bf31d071a7b009d7e5fd4108eb4ea0371dc8ef4d
-
SHA256
56a752d161b377c687d7c2d6608eb0b47a29749d8d1a71bcc78100cb0a4d8f82
-
SHA512
73e342523a8bf8a9fc71ec1ad9e280dbc1979ef8d9628abec346bc80b5e232666274ff1306a0b7b0998494e4a08ff9ac9498ceb2ebf1c47172e19e0c24332ba1
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5D:bxNrC7kYo1Fxf2rYP
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_4cd3b36fc83a6644dba510ca1a744bdb_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_4cd3b36fc83a6644dba510ca1a744bdb_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_4cd3b36fc83a6644dba510ca1a744bdb_cryptolocker
-
Size
34KB
-
MD5
4cd3b36fc83a6644dba510ca1a744bdb
-
SHA1
bf31d071a7b009d7e5fd4108eb4ea0371dc8ef4d
-
SHA256
56a752d161b377c687d7c2d6608eb0b47a29749d8d1a71bcc78100cb0a4d8f82
-
SHA512
73e342523a8bf8a9fc71ec1ad9e280dbc1979ef8d9628abec346bc80b5e232666274ff1306a0b7b0998494e4a08ff9ac9498ceb2ebf1c47172e19e0c24332ba1
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5D:bxNrC7kYo1Fxf2rYP
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-