Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-15_b76b917e0726d7a8225fb7f7f5cbcba5_cryptolocker
-
Size
38KB
-
Sample
240515-1hkdbsdc6x
-
MD5
b76b917e0726d7a8225fb7f7f5cbcba5
-
SHA1
fc565f8e104f92a697bebb4b607bf8fd04edfb15
-
SHA256
9f352349adc1092c7afa9371803bfce73e545e07128fdad9c6f7c13e60978321
-
SHA512
392d25f70cf8255b331b20b2d31e7af6371e409030a10d02284080d44add5f6140b158c86e69ac28407cbf056ac317b17533e381123630b88ed0c81892bbd46e
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3DQ:qUmnpomddpMOtEvwDpjjaYaQ0
Behavioral task
behavioral1
Sample
2024-05-15_b76b917e0726d7a8225fb7f7f5cbcba5_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-15_b76b917e0726d7a8225fb7f7f5cbcba5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_b76b917e0726d7a8225fb7f7f5cbcba5_cryptolocker
-
Size
38KB
-
MD5
b76b917e0726d7a8225fb7f7f5cbcba5
-
SHA1
fc565f8e104f92a697bebb4b607bf8fd04edfb15
-
SHA256
9f352349adc1092c7afa9371803bfce73e545e07128fdad9c6f7c13e60978321
-
SHA512
392d25f70cf8255b331b20b2d31e7af6371e409030a10d02284080d44add5f6140b158c86e69ac28407cbf056ac317b17533e381123630b88ed0c81892bbd46e
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3DQ:qUmnpomddpMOtEvwDpjjaYaQ0
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-