Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-23_daeebe6e86cfeef0117437e165b4c421_cryptolocker
-
Size
55KB
-
Sample
240523-e7gsvadh9y
-
MD5
daeebe6e86cfeef0117437e165b4c421
-
SHA1
56f3aead951b75b6325c6b1d8ad329bdba714e8e
-
SHA256
ded57860447d25b0cded48b81fa16b535252c5fc09df9c7b61292eababa8283c
-
SHA512
beeb28208848060182dfb11006ceacf7e8e6c1bee23346be3d036cffe5bc5f6e41ac6c406c6a5ec94c5fae2a7962ae9edad7e0a17337487fc5e3e9961e298c1c
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5Uj8:ZVxkGOtEvwDpjcF
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_daeebe6e86cfeef0117437e165b4c421_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-23_daeebe6e86cfeef0117437e165b4c421_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-23_daeebe6e86cfeef0117437e165b4c421_cryptolocker
-
Size
55KB
-
MD5
daeebe6e86cfeef0117437e165b4c421
-
SHA1
56f3aead951b75b6325c6b1d8ad329bdba714e8e
-
SHA256
ded57860447d25b0cded48b81fa16b535252c5fc09df9c7b61292eababa8283c
-
SHA512
beeb28208848060182dfb11006ceacf7e8e6c1bee23346be3d036cffe5bc5f6e41ac6c406c6a5ec94c5fae2a7962ae9edad7e0a17337487fc5e3e9961e298c1c
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdO5Uj8:ZVxkGOtEvwDpjcF
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-