Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-13_a044aa1fd316f467029b7634fd71df51_cryptolocker
-
Size
37KB
-
Sample
240513-swp7qscb4v
-
MD5
a044aa1fd316f467029b7634fd71df51
-
SHA1
c1f6b01a09c23c0bfb97b8748126ffeabde66833
-
SHA256
9f4659371a8c8bd559b7bc918d339499320b222c50ff16521e4ed95bca66366b
-
SHA512
6ae57ff44cc2680ec4ac4f822b48ff31275ddbc3c626ad4d1d0421c065316de9689a8dd20846939589880fad14388968e7bf4b88679fd62988944dbab7fbebd6
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4Y:fT+hsMQMOtEvwDpjoIHY
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_a044aa1fd316f467029b7634fd71df51_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-13_a044aa1fd316f467029b7634fd71df51_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-13_a044aa1fd316f467029b7634fd71df51_cryptolocker
-
Size
37KB
-
MD5
a044aa1fd316f467029b7634fd71df51
-
SHA1
c1f6b01a09c23c0bfb97b8748126ffeabde66833
-
SHA256
9f4659371a8c8bd559b7bc918d339499320b222c50ff16521e4ed95bca66366b
-
SHA512
6ae57ff44cc2680ec4ac4f822b48ff31275ddbc3c626ad4d1d0421c065316de9689a8dd20846939589880fad14388968e7bf4b88679fd62988944dbab7fbebd6
-
SSDEEP
768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4Y:fT+hsMQMOtEvwDpjoIHY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-