Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-31_4e18d89b70f9b0c1061bd32abe74ff1c_cryptolocker
-
Size
43KB
-
Sample
240531-e5y94sgb64
-
MD5
4e18d89b70f9b0c1061bd32abe74ff1c
-
SHA1
258e00cc0b7c6d44d4297024677debc40aa6ee6a
-
SHA256
c421c1605c9516285d2a69fcd29065a33697620e2ad6120f5405ed3d52c2deeb
-
SHA512
72c9e11ffc138afd98f240e2afd514a8ca1e73556c0920a0451c37e3bd81394579a3c72942bd96da59817c48df80fb660c25c178d374d8dd2182bc91fab042b5
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/JiJ:bAvJCF+RQgJeab4sy/loJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_4e18d89b70f9b0c1061bd32abe74ff1c_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_4e18d89b70f9b0c1061bd32abe74ff1c_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-31_4e18d89b70f9b0c1061bd32abe74ff1c_cryptolocker
-
Size
43KB
-
MD5
4e18d89b70f9b0c1061bd32abe74ff1c
-
SHA1
258e00cc0b7c6d44d4297024677debc40aa6ee6a
-
SHA256
c421c1605c9516285d2a69fcd29065a33697620e2ad6120f5405ed3d52c2deeb
-
SHA512
72c9e11ffc138afd98f240e2afd514a8ca1e73556c0920a0451c37e3bd81394579a3c72942bd96da59817c48df80fb660c25c178d374d8dd2182bc91fab042b5
-
SSDEEP
768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/JiJ:bAvJCF+RQgJeab4sy/loJ
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-