Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-27_d9b38f5bffd4c7038566b0dce98f17fa_cryptolocker
-
Size
30KB
-
Sample
240527-c9k7yade8v
-
MD5
d9b38f5bffd4c7038566b0dce98f17fa
-
SHA1
5fb08b53e70daa99e51ae26ada5264a6c90a1230
-
SHA256
3c60d8b5c4a141f7f2690f19b5c4c8588981b945e5908d6e3ee34cbf365eb163
-
SHA512
dfae90ac484b5e834c8722d943bec122f660e993ce37408473b8b9912976e78d2279032d4f7702287d4cee1723ee3442a74bb712d3b29668c54fb4428f810f5f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XM
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_d9b38f5bffd4c7038566b0dce98f17fa_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-27_d9b38f5bffd4c7038566b0dce98f17fa_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-27_d9b38f5bffd4c7038566b0dce98f17fa_cryptolocker
-
Size
30KB
-
MD5
d9b38f5bffd4c7038566b0dce98f17fa
-
SHA1
5fb08b53e70daa99e51ae26ada5264a6c90a1230
-
SHA256
3c60d8b5c4a141f7f2690f19b5c4c8588981b945e5908d6e3ee34cbf365eb163
-
SHA512
dfae90ac484b5e834c8722d943bec122f660e993ce37408473b8b9912976e78d2279032d4f7702287d4cee1723ee3442a74bb712d3b29668c54fb4428f810f5f
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNfh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XM
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-