Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-30_033af87b560081f55c648b2c05804b5f_cryptolocker
-
Size
65KB
-
Sample
240530-vx9zmsgb24
-
MD5
033af87b560081f55c648b2c05804b5f
-
SHA1
83525c6b74c0f2f9103ab047d79b3e25f6b20479
-
SHA256
17fb268398950e92bc82550258b94c00733918a715f6f23f1e5f671183ffdccd
-
SHA512
9a6fcd537187bdc08edc012a39f4021861e3fece759da4d092c5fc08f975c8e9a80b71729e24654a7f852a31ce1b7a48c13542ff55c9178ba09bca76da0a9a56
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYI:TCjsIOtEvwDpj5HE/OUHnSMH
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_033af87b560081f55c648b2c05804b5f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-30_033af87b560081f55c648b2c05804b5f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-30_033af87b560081f55c648b2c05804b5f_cryptolocker
-
Size
65KB
-
MD5
033af87b560081f55c648b2c05804b5f
-
SHA1
83525c6b74c0f2f9103ab047d79b3e25f6b20479
-
SHA256
17fb268398950e92bc82550258b94c00733918a715f6f23f1e5f671183ffdccd
-
SHA512
9a6fcd537187bdc08edc012a39f4021861e3fece759da4d092c5fc08f975c8e9a80b71729e24654a7f852a31ce1b7a48c13542ff55c9178ba09bca76da0a9a56
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMTIzYI:TCjsIOtEvwDpj5HE/OUHnSMH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-