Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-15_1a4575d7756ef7efbcadc7e5bb6088c2_cryptolocker
-
Size
41KB
-
Sample
240515-w33m7ade3y
-
MD5
1a4575d7756ef7efbcadc7e5bb6088c2
-
SHA1
7b696471223ff75972fa48232b7737592d697f3e
-
SHA256
bcbd9be946286d03ae2ef96d93d58a1c87d3bab3170e273c959a375491718459
-
SHA512
a91d0c1e126c6a7edc3fd29138188cd5fafcd35f51685022256cee4b825758289e8aa4c0b548001d5072c725427bde5027efa3d1cc62ba4874c4b7fec123154a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqtA:bCDOw9aMDooc+vAqtA
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_1a4575d7756ef7efbcadc7e5bb6088c2_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-15_1a4575d7756ef7efbcadc7e5bb6088c2_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_1a4575d7756ef7efbcadc7e5bb6088c2_cryptolocker
-
Size
41KB
-
MD5
1a4575d7756ef7efbcadc7e5bb6088c2
-
SHA1
7b696471223ff75972fa48232b7737592d697f3e
-
SHA256
bcbd9be946286d03ae2ef96d93d58a1c87d3bab3170e273c959a375491718459
-
SHA512
a91d0c1e126c6a7edc3fd29138188cd5fafcd35f51685022256cee4b825758289e8aa4c0b548001d5072c725427bde5027efa3d1cc62ba4874c4b7fec123154a
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqtA:bCDOw9aMDooc+vAqtA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-