Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-26_9a1f69b7e03817ab42d05f96090d0e39_cryptolocker
-
Size
45KB
-
Sample
240526-3ftkbsfh9v
-
MD5
9a1f69b7e03817ab42d05f96090d0e39
-
SHA1
72236c4afdfa1b25aac6fcd1cd8d0bcdae4bb7a2
-
SHA256
c77a6694a2b642463993e884cc14843b5d4017a0c4749e385fd5db44f5b65126
-
SHA512
5b638b674816a4d40f4ece8029ae416bc0fa2b087a77a471778d31d10c981c2871bf370abc5f1ea5a099925e4742ed1e85bb9d4170d9f78d0c98dcc33bd558f4
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp13/7xlbC:bxNrC7kYo1Fxf3s05rwxbF73NlW
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_9a1f69b7e03817ab42d05f96090d0e39_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-26_9a1f69b7e03817ab42d05f96090d0e39_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-26_9a1f69b7e03817ab42d05f96090d0e39_cryptolocker
-
Size
45KB
-
MD5
9a1f69b7e03817ab42d05f96090d0e39
-
SHA1
72236c4afdfa1b25aac6fcd1cd8d0bcdae4bb7a2
-
SHA256
c77a6694a2b642463993e884cc14843b5d4017a0c4749e385fd5db44f5b65126
-
SHA512
5b638b674816a4d40f4ece8029ae416bc0fa2b087a77a471778d31d10c981c2871bf370abc5f1ea5a099925e4742ed1e85bb9d4170d9f78d0c98dcc33bd558f4
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFp13/7xlbC:bxNrC7kYo1Fxf3s05rwxbF73NlW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-