Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker
-
Size
47KB
-
Sample
240522-sepjwafc67
-
MD5
c065b744c5ea8ffefa42754a557fc6a3
-
SHA1
23aa915e10602ede33d6257f410f05518483b701
-
SHA256
c422df7827eea72daadbfa19d03bc44b5a6453f22a51543412a838febe3cecf5
-
SHA512
f9c614192e23ce8567ef8f68bb2d89a58a2bb7ca46311074a8782d2a4be0ec3152a8edccf78fb25b94e6ee042a88fe04cd2c01706cd2c105dcf51e25ab66b5a1
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VR:79inqyNR/QtOOtEvwDpjBKccJVODvy3w
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker
-
Size
47KB
-
MD5
c065b744c5ea8ffefa42754a557fc6a3
-
SHA1
23aa915e10602ede33d6257f410f05518483b701
-
SHA256
c422df7827eea72daadbfa19d03bc44b5a6453f22a51543412a838febe3cecf5
-
SHA512
f9c614192e23ce8567ef8f68bb2d89a58a2bb7ca46311074a8782d2a4be0ec3152a8edccf78fb25b94e6ee042a88fe04cd2c01706cd2c105dcf51e25ab66b5a1
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VR:79inqyNR/QtOOtEvwDpjBKccJVODvy3w
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-