Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker
-
Size
49KB
-
Sample
240529-nlhbxsdf74
-
MD5
0a4e9e5a6cf5ad2353c56f114e99f498
-
SHA1
439c03f5a11d54574d3992c0bfe094e737400fc3
-
SHA256
77bb38ce3b777f927585e67b8b3db04fdfcb4cbf92977a284615a6580f26ed6a
-
SHA512
aeab069cf45858ec94c20ef3821891abffb8fd8bbb73007b00630fa4af0622ae5c0372ae952593cc9c1031665ddac363d0ee38606ed7c99c8a79d14ad9768ea5
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+0:bIDOw9a0Dwo3P1ojvUSD4PInyDJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker
-
Size
49KB
-
MD5
0a4e9e5a6cf5ad2353c56f114e99f498
-
SHA1
439c03f5a11d54574d3992c0bfe094e737400fc3
-
SHA256
77bb38ce3b777f927585e67b8b3db04fdfcb4cbf92977a284615a6580f26ed6a
-
SHA512
aeab069cf45858ec94c20ef3821891abffb8fd8bbb73007b00630fa4af0622ae5c0372ae952593cc9c1031665ddac363d0ee38606ed7c99c8a79d14ad9768ea5
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+0:bIDOw9a0Dwo3P1ojvUSD4PInyDJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-