Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-20_2527b863481b5a4d7d2af6613781ba03_cryptolocker
-
Size
62KB
-
Sample
240520-3enyfsbe5v
-
MD5
2527b863481b5a4d7d2af6613781ba03
-
SHA1
3583cb56b03be1b3599ffd4540afffc8cf661f09
-
SHA256
334b745fef48fa6af9f83c9420766f7f46226c45a40fd42a195065433d66c594
-
SHA512
ddab9925057ee44a1903c61d0a3f48432f0801ea31bd735bc3cf20036c91abe317a51c6f6ee8d15fb872e7c0dd6f7cbebd5eccbcf058bdd3d080f0994ceabf71
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnF7H6:btng54SMLr+/AO/kIhfoKMHdaw
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_2527b863481b5a4d7d2af6613781ba03_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-20_2527b863481b5a4d7d2af6613781ba03_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-20_2527b863481b5a4d7d2af6613781ba03_cryptolocker
-
Size
62KB
-
MD5
2527b863481b5a4d7d2af6613781ba03
-
SHA1
3583cb56b03be1b3599ffd4540afffc8cf661f09
-
SHA256
334b745fef48fa6af9f83c9420766f7f46226c45a40fd42a195065433d66c594
-
SHA512
ddab9925057ee44a1903c61d0a3f48432f0801ea31bd735bc3cf20036c91abe317a51c6f6ee8d15fb872e7c0dd6f7cbebd5eccbcf058bdd3d080f0994ceabf71
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHZnF7H6:btng54SMLr+/AO/kIhfoKMHdaw
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-