Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-01_24f687cb099d03ce60045e7ef8848640_cryptolocker
-
Size
48KB
-
Sample
240601-2bzecahe47
-
MD5
24f687cb099d03ce60045e7ef8848640
-
SHA1
c19370685affdb636c66ce0a069ddd6809ce62ce
-
SHA256
351b4214b06b9ea9fa5e90a81831b764851526c7d8e1ea805777031f5fd60c1c
-
SHA512
bb501093b33443011a53d2d72878d02a88300170b452e14b08537763067bba7e2fe4ec244b6ef3fc010faaf08a995ab75a42a543e3306bf5239cf25ae7b3d102
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LW:79mqyNhQMOtEvwDpjBzckqSuS
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_24f687cb099d03ce60045e7ef8848640_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_24f687cb099d03ce60045e7ef8848640_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_24f687cb099d03ce60045e7ef8848640_cryptolocker
-
Size
48KB
-
MD5
24f687cb099d03ce60045e7ef8848640
-
SHA1
c19370685affdb636c66ce0a069ddd6809ce62ce
-
SHA256
351b4214b06b9ea9fa5e90a81831b764851526c7d8e1ea805777031f5fd60c1c
-
SHA512
bb501093b33443011a53d2d72878d02a88300170b452e14b08537763067bba7e2fe4ec244b6ef3fc010faaf08a995ab75a42a543e3306bf5239cf25ae7b3d102
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LW:79mqyNhQMOtEvwDpjBzckqSuS
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-