Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-27_052663c3d31dcc199baa233a47993b07_cryptolocker
-
Size
57KB
-
Sample
240527-ez56gafh7z
-
MD5
052663c3d31dcc199baa233a47993b07
-
SHA1
7f58c64d0473f322de37fe32e48cab3a2bad1430
-
SHA256
9bd7b28fa13b0f238133fb3a6c9065fd61acbe806e11976971f7ac2c92876b10
-
SHA512
9787ad61bf09343dd03bb7eef3412125c0c8402ddcd58302ecb86f5d5f4762a281413000f057e2185c865d63637a0af4f1449a3a7814481c69398a7f9ffdc666
-
SSDEEP
768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlgzCW:bP9g/xtCS3Dxx0nCW
Behavioral task
behavioral1
Sample
2024-05-27_052663c3d31dcc199baa233a47993b07_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-27_052663c3d31dcc199baa233a47993b07_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-27_052663c3d31dcc199baa233a47993b07_cryptolocker
-
Size
57KB
-
MD5
052663c3d31dcc199baa233a47993b07
-
SHA1
7f58c64d0473f322de37fe32e48cab3a2bad1430
-
SHA256
9bd7b28fa13b0f238133fb3a6c9065fd61acbe806e11976971f7ac2c92876b10
-
SHA512
9787ad61bf09343dd03bb7eef3412125c0c8402ddcd58302ecb86f5d5f4762a281413000f057e2185c865d63637a0af4f1449a3a7814481c69398a7f9ffdc666
-
SSDEEP
768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlgzCW:bP9g/xtCS3Dxx0nCW
Score9/10-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-