Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-26_8a52623a2ae0e361207cc0502b827242_cryptolocker
-
Size
46KB
-
Sample
240526-sw9w5sca55
-
MD5
8a52623a2ae0e361207cc0502b827242
-
SHA1
acc63902d9098917e49f35dd37ff02c5691235b7
-
SHA256
dfe666f4a5d99ceaf7132edc26c5aa50fdea7eea557fc6747db536616a31e674
-
SHA512
5644a22be13056e3f4cebf5d215a062659a1a17f69cc4685982f2fb9ad535dcba824141643a877c7a4480a16dd581462e5fe26d0a52c9c9cdb4b41495ec2fa87
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPJ2K:P6QFElP6k+MRQMOtEvwDpjBQpVX1K
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_8a52623a2ae0e361207cc0502b827242_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-26_8a52623a2ae0e361207cc0502b827242_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-26_8a52623a2ae0e361207cc0502b827242_cryptolocker
-
Size
46KB
-
MD5
8a52623a2ae0e361207cc0502b827242
-
SHA1
acc63902d9098917e49f35dd37ff02c5691235b7
-
SHA256
dfe666f4a5d99ceaf7132edc26c5aa50fdea7eea557fc6747db536616a31e674
-
SHA512
5644a22be13056e3f4cebf5d215a062659a1a17f69cc4685982f2fb9ad535dcba824141643a877c7a4480a16dd581462e5fe26d0a52c9c9cdb4b41495ec2fa87
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPJ2K:P6QFElP6k+MRQMOtEvwDpjBQpVX1K
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-