Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-20_62461c735c70cd54fd6aa4de5eedcc97_cryptolocker
-
Size
35KB
-
Sample
240520-2b8ysahf75
-
MD5
62461c735c70cd54fd6aa4de5eedcc97
-
SHA1
7ce2982d28af84d8d237b167b56e4b96f2c9d5d3
-
SHA256
82fc719da5e64627a0be58666e4772c66ce6adb6b3d2107ffc090f03feb5184b
-
SHA512
fb7282d4dcca91b4ad90832d4a9c62f668ea5213ce0eea8a70ce1798ec919e754f2555884e38b95b030f624bd7d99015c77e047dd37083aaca6b796374fdb427
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5O7:bxNrC7kYo1Fxf2rYe
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_62461c735c70cd54fd6aa4de5eedcc97_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-20_62461c735c70cd54fd6aa4de5eedcc97_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-20_62461c735c70cd54fd6aa4de5eedcc97_cryptolocker
-
Size
35KB
-
MD5
62461c735c70cd54fd6aa4de5eedcc97
-
SHA1
7ce2982d28af84d8d237b167b56e4b96f2c9d5d3
-
SHA256
82fc719da5e64627a0be58666e4772c66ce6adb6b3d2107ffc090f03feb5184b
-
SHA512
fb7282d4dcca91b4ad90832d4a9c62f668ea5213ce0eea8a70ce1798ec919e754f2555884e38b95b030f624bd7d99015c77e047dd37083aaca6b796374fdb427
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5O7:bxNrC7kYo1Fxf2rYe
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-