Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-12_7c34e6fe1f75200a5d11a1bdf2136c38_cryptolocker
-
Size
44KB
-
Sample
240512-rykjlaaf8x
-
MD5
7c34e6fe1f75200a5d11a1bdf2136c38
-
SHA1
06f059a5ef08a79606babde0b764c8ceb23e211f
-
SHA256
d7d831687db3380ab62bcadc8224de7e8e853aabeab4c2c5d3636d34a12c478b
-
SHA512
8beb668bcd8e941fd26524e2874e41834ef4a42a8d89c17db55357919d16f11d2efe5d9e05a459a3d854254109f47bfbcdf968dc39774cbda3aa4521d83d1af5
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqs:bc/y2lkF0+Beqs
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_7c34e6fe1f75200a5d11a1bdf2136c38_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-12_7c34e6fe1f75200a5d11a1bdf2136c38_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-12_7c34e6fe1f75200a5d11a1bdf2136c38_cryptolocker
-
Size
44KB
-
MD5
7c34e6fe1f75200a5d11a1bdf2136c38
-
SHA1
06f059a5ef08a79606babde0b764c8ceb23e211f
-
SHA256
d7d831687db3380ab62bcadc8224de7e8e853aabeab4c2c5d3636d34a12c478b
-
SHA512
8beb668bcd8e941fd26524e2874e41834ef4a42a8d89c17db55357919d16f11d2efe5d9e05a459a3d854254109f47bfbcdf968dc39774cbda3aa4521d83d1af5
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqs:bc/y2lkF0+Beqs
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-