Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-20_f719f459179079e66e435fad3820f73e_cryptolocker
-
Size
41KB
-
Sample
240520-bajdmacd21
-
MD5
f719f459179079e66e435fad3820f73e
-
SHA1
3e04ce1faab63656647bcb1016ee97a4641eb3cc
-
SHA256
3dda3fd03b7058526d9a6fa6c942161ba1265355bd6c7cf459a16c6d87d3691a
-
SHA512
946d702748169ca11be3af8250f8ede4cc5a219b1e61db3546eefabf59200cabacd45e392ca972e8ec41434934b11361729155d0d50425e7f5a287a80748528a
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwN:bA6YcA/X6G0W143QN
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_f719f459179079e66e435fad3820f73e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-20_f719f459179079e66e435fad3820f73e_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-20_f719f459179079e66e435fad3820f73e_cryptolocker
-
Size
41KB
-
MD5
f719f459179079e66e435fad3820f73e
-
SHA1
3e04ce1faab63656647bcb1016ee97a4641eb3cc
-
SHA256
3dda3fd03b7058526d9a6fa6c942161ba1265355bd6c7cf459a16c6d87d3691a
-
SHA512
946d702748169ca11be3af8250f8ede4cc5a219b1e61db3546eefabf59200cabacd45e392ca972e8ec41434934b11361729155d0d50425e7f5a287a80748528a
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3HwN:bA6YcA/X6G0W143QN
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-