Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-11_22f84ec802be3fff8e3e2a1b0eecff69_cryptolocker
-
Size
54KB
-
Sample
240511-y6fc6sff4v
-
MD5
22f84ec802be3fff8e3e2a1b0eecff69
-
SHA1
48d7a5bac0cd7e9c74451dbb31745e4c8090a83a
-
SHA256
5e23324643cb25bced58d86f5db882bb662add439004f550fec836efd1edb76e
-
SHA512
aac23f68152786169125c7aaccf7e746975a3eb826cf390adad8990c270746b4b3bbe52c668a59d568df338a1a205f3a5d364b8ad5f0a1a333b397e3f30f2c35
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9Xv+mb6uXsl:bIDOw9a0DwitDZzc16j
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_22f84ec802be3fff8e3e2a1b0eecff69_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-11_22f84ec802be3fff8e3e2a1b0eecff69_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-11_22f84ec802be3fff8e3e2a1b0eecff69_cryptolocker
-
Size
54KB
-
MD5
22f84ec802be3fff8e3e2a1b0eecff69
-
SHA1
48d7a5bac0cd7e9c74451dbb31745e4c8090a83a
-
SHA256
5e23324643cb25bced58d86f5db882bb662add439004f550fec836efd1edb76e
-
SHA512
aac23f68152786169125c7aaccf7e746975a3eb826cf390adad8990c270746b4b3bbe52c668a59d568df338a1a205f3a5d364b8ad5f0a1a333b397e3f30f2c35
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9Xv+mb6uXsl:bIDOw9a0DwitDZzc16j
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-