Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-23_3538fb5307cb157678933f6f97a75983_cryptolocker
-
Size
43KB
-
Sample
240523-2bn9dabc2z
-
MD5
3538fb5307cb157678933f6f97a75983
-
SHA1
a5f735aea81434d194812d3311c00f79390b3e26
-
SHA256
67af82685aa9ee6569a433978ff9690bc940e12d979542311f543d6f3668e82b
-
SHA512
c50843b79a8e44a6b36d59887e662bc76b3f15d07606ba81d3ceec61517ecc4fc04080dcf797644c208734761c21cbcafed1dfceda84b5188486c4fa040a46a7
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66TcW:vj+jsMQMOtEvwDpj5HW5scW
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_3538fb5307cb157678933f6f97a75983_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_3538fb5307cb157678933f6f97a75983_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_3538fb5307cb157678933f6f97a75983_cryptolocker
-
Size
43KB
-
MD5
3538fb5307cb157678933f6f97a75983
-
SHA1
a5f735aea81434d194812d3311c00f79390b3e26
-
SHA256
67af82685aa9ee6569a433978ff9690bc940e12d979542311f543d6f3668e82b
-
SHA512
c50843b79a8e44a6b36d59887e662bc76b3f15d07606ba81d3ceec61517ecc4fc04080dcf797644c208734761c21cbcafed1dfceda84b5188486c4fa040a46a7
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66TcW:vj+jsMQMOtEvwDpj5HW5scW
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-