Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-20_b51f4c2aa3a887ba709b90b45e2282fe_cryptolocker
-
Size
84KB
-
Sample
240520-sk7bwafg3s
-
MD5
b51f4c2aa3a887ba709b90b45e2282fe
-
SHA1
989e3a2254a40820a8a1581ae73a56552fda6ccf
-
SHA256
97ab13cf5693933d27800a0a0c7b87bc6b6bb85c231c928feb1e984d6a507346
-
SHA512
fc58138d1e41c102e6a5528cbf2cd76a882afa50183a8ad85f92928ad92f848e74a61fc80c685b8e6d1ade64484dc6d4cd5b380d09b09f70f269c60d94dc56c2
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCh:TCjsIOtEvwDpj5HE/OUHnSM0
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-20_b51f4c2aa3a887ba709b90b45e2282fe_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-20_b51f4c2aa3a887ba709b90b45e2282fe_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-20_b51f4c2aa3a887ba709b90b45e2282fe_cryptolocker
-
Size
84KB
-
MD5
b51f4c2aa3a887ba709b90b45e2282fe
-
SHA1
989e3a2254a40820a8a1581ae73a56552fda6ccf
-
SHA256
97ab13cf5693933d27800a0a0c7b87bc6b6bb85c231c928feb1e984d6a507346
-
SHA512
fc58138d1e41c102e6a5528cbf2cd76a882afa50183a8ad85f92928ad92f848e74a61fc80c685b8e6d1ade64484dc6d4cd5b380d09b09f70f269c60d94dc56c2
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCh:TCjsIOtEvwDpj5HE/OUHnSM0
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-