Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-22_760288e01cd97fdd69d0dd0b42032462_cryptolocker
-
Size
41KB
-
Sample
240522-gmhkraec22
-
MD5
760288e01cd97fdd69d0dd0b42032462
-
SHA1
2d68fa468c2a30a2a2020e79497e3306fe194391
-
SHA256
29a0fd88dd573ec106dafba069064cc298a0047153141aa044d215ca60cf1c4d
-
SHA512
a6cd4dfbd04464874eebdf62c4413ede6888564d0391b08d0f232327352bece4af318b28815d5bbb7613af24b6b988e36e93020e658e5aebd5971c6b8a8d2f68
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr9Or8:X6QFElP6n+gJQMOtEvwDpjBsYK6r0r8
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_760288e01cd97fdd69d0dd0b42032462_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-05-22_760288e01cd97fdd69d0dd0b42032462_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-22_760288e01cd97fdd69d0dd0b42032462_cryptolocker
-
Size
41KB
-
MD5
760288e01cd97fdd69d0dd0b42032462
-
SHA1
2d68fa468c2a30a2a2020e79497e3306fe194391
-
SHA256
29a0fd88dd573ec106dafba069064cc298a0047153141aa044d215ca60cf1c4d
-
SHA512
a6cd4dfbd04464874eebdf62c4413ede6888564d0391b08d0f232327352bece4af318b28815d5bbb7613af24b6b988e36e93020e658e5aebd5971c6b8a8d2f68
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfr9Or8:X6QFElP6n+gJQMOtEvwDpjBsYK6r0r8
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-