Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-28_6bc46e60e63267c364c5b6cdbd3da61f_cryptolocker
-
Size
38KB
-
Sample
240528-szb5aaad7x
-
MD5
6bc46e60e63267c364c5b6cdbd3da61f
-
SHA1
bb04f872ffa54227d379b9fb1abcd7ee63bbb42b
-
SHA256
e042ade734923d7d0e316b87bedea44c05cf0bdca350e335a26b68e8d040fc55
-
SHA512
8de3dd1bd5e6a00d03ed7e0e636d183180db9eaf34b32987f91415c4cde39eb40d6c285aec9a01b5764863c1385512923d23783cf2bb50a1cdf80b45d3f8f74d
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mrq:bc/y2lLRU6zA6qu
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_6bc46e60e63267c364c5b6cdbd3da61f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_6bc46e60e63267c364c5b6cdbd3da61f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-28_6bc46e60e63267c364c5b6cdbd3da61f_cryptolocker
-
Size
38KB
-
MD5
6bc46e60e63267c364c5b6cdbd3da61f
-
SHA1
bb04f872ffa54227d379b9fb1abcd7ee63bbb42b
-
SHA256
e042ade734923d7d0e316b87bedea44c05cf0bdca350e335a26b68e8d040fc55
-
SHA512
8de3dd1bd5e6a00d03ed7e0e636d183180db9eaf34b32987f91415c4cde39eb40d6c285aec9a01b5764863c1385512923d23783cf2bb50a1cdf80b45d3f8f74d
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mrq:bc/y2lLRU6zA6qu
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-