Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-12_45a4003e30ec7bb87055b82bd8dabd8f_cryptolocker
-
Size
41KB
-
Sample
240512-edh4tafa8s
-
MD5
45a4003e30ec7bb87055b82bd8dabd8f
-
SHA1
6196948e40bbc192f1893aebac9640aa969316d2
-
SHA256
f4d3a6f6eb5118976870cf302a0c1cd9c6fb446faa66815a85b962d7c13effa9
-
SHA512
ab9e0c5895078c85541b9612e4a575aecfbf5a935b5a7f015fa36fea9f9deac57189f11b7595e37fe378263d56c4d9fab556b135eee9892988a712a8b7a6cdc3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCW:X6QFElP6n+gJQMOtEvwDpjBsYK/fp
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_45a4003e30ec7bb87055b82bd8dabd8f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-12_45a4003e30ec7bb87055b82bd8dabd8f_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-12_45a4003e30ec7bb87055b82bd8dabd8f_cryptolocker
-
Size
41KB
-
MD5
45a4003e30ec7bb87055b82bd8dabd8f
-
SHA1
6196948e40bbc192f1893aebac9640aa969316d2
-
SHA256
f4d3a6f6eb5118976870cf302a0c1cd9c6fb446faa66815a85b962d7c13effa9
-
SHA512
ab9e0c5895078c85541b9612e4a575aecfbf5a935b5a7f015fa36fea9f9deac57189f11b7595e37fe378263d56c4d9fab556b135eee9892988a712a8b7a6cdc3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCW:X6QFElP6n+gJQMOtEvwDpjBsYK/fp
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-