Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-26_44fde8a310323594034b5fc0019d478f_cryptolocker
-
Size
89KB
-
Sample
240526-d47peseb47
-
MD5
44fde8a310323594034b5fc0019d478f
-
SHA1
8b40bf18f56a09aed2f097fa7927d67dcb1e2b12
-
SHA256
37ace6bdee16051e9ea2efb1354478cad1615a4ffbe344b156c96232b5c5ef1e
-
SHA512
45de7cabf40c3e0f897c121a9ded9319a0ec0e5a140f956349d9e087df4c9266bb6bda492e63365b54cf1c494db98bcd40920f9ee6ccbd59551f020eb243c914
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAZ:n6a+1SEOtEvwDpjYYvQd2PK
Behavioral task
behavioral1
Sample
2024-05-26_44fde8a310323594034b5fc0019d478f_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-26_44fde8a310323594034b5fc0019d478f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-26_44fde8a310323594034b5fc0019d478f_cryptolocker
-
Size
89KB
-
MD5
44fde8a310323594034b5fc0019d478f
-
SHA1
8b40bf18f56a09aed2f097fa7927d67dcb1e2b12
-
SHA256
37ace6bdee16051e9ea2efb1354478cad1615a4ffbe344b156c96232b5c5ef1e
-
SHA512
45de7cabf40c3e0f897c121a9ded9319a0ec0e5a140f956349d9e087df4c9266bb6bda492e63365b54cf1c494db98bcd40920f9ee6ccbd59551f020eb243c914
-
SSDEEP
1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAZ:n6a+1SEOtEvwDpjYYvQd2PK
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-