Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-24_927d3d40d16848dfc3fb8cab49cc3a1e_cryptolocker
-
Size
90KB
-
Sample
240524-rv9pbahe76
-
MD5
927d3d40d16848dfc3fb8cab49cc3a1e
-
SHA1
ec8101e4a07ca30e59afb04b4331592b8c8824cb
-
SHA256
d81b1eaf976e857fe8868a5a9486698d65a382d6d6f1f0aab613920c27bce331
-
SHA512
42b1c97e6636063e4dca144523fabf0c7f1b503ac2d15ca626bd6eee50338b73011a5474286cf8904b702ed74e7c9d9966d27a7bffecfa1a5285a3d40e4600e9
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIif:AnBdOOtEvwDpj6zh
Behavioral task
behavioral1
Sample
2024-05-24_927d3d40d16848dfc3fb8cab49cc3a1e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-24_927d3d40d16848dfc3fb8cab49cc3a1e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-24_927d3d40d16848dfc3fb8cab49cc3a1e_cryptolocker
-
Size
90KB
-
MD5
927d3d40d16848dfc3fb8cab49cc3a1e
-
SHA1
ec8101e4a07ca30e59afb04b4331592b8c8824cb
-
SHA256
d81b1eaf976e857fe8868a5a9486698d65a382d6d6f1f0aab613920c27bce331
-
SHA512
42b1c97e6636063e4dca144523fabf0c7f1b503ac2d15ca626bd6eee50338b73011a5474286cf8904b702ed74e7c9d9966d27a7bffecfa1a5285a3d40e4600e9
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgIif:AnBdOOtEvwDpj6zh
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-