Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker
-
Size
97KB
-
Sample
240530-jhzdtaca44
-
MD5
ff8423649e5a9a243123efab8e22c303
-
SHA1
6c88d101ddd8633c29350a592b62c98e4c5f3449
-
SHA256
dbc1484c7f2edb0e09dca1c54f0800e2c6aff0c66d176c95f5677a2bb2531f9d
-
SHA512
9c0d330343e05b1bf3d836497cd25542636d0650a1bbca95322118c1a9739dac22507a30d3566837f4fe3c2edc9a10ef9850d0f9a89c352bc686147d43fc48f6
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0M:V6a+pOtEvwDpjtzk
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker
-
Size
97KB
-
MD5
ff8423649e5a9a243123efab8e22c303
-
SHA1
6c88d101ddd8633c29350a592b62c98e4c5f3449
-
SHA256
dbc1484c7f2edb0e09dca1c54f0800e2c6aff0c66d176c95f5677a2bb2531f9d
-
SHA512
9c0d330343e05b1bf3d836497cd25542636d0650a1bbca95322118c1a9739dac22507a30d3566837f4fe3c2edc9a10ef9850d0f9a89c352bc686147d43fc48f6
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0M:V6a+pOtEvwDpjtzk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-