Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker
-
Size
44KB
-
Sample
240602-kmncsagd5s
-
MD5
6cc89c858529c5ab937d7dded32f76c7
-
SHA1
e8fad2002b8ec19a4e3069861c0973366ad54011
-
SHA256
d98285e89f97340565b1f0d99ecffdc5b7dff41c3e3dd117caf10f38ad5c2e0b
-
SHA512
d1d748395c26ae369946f30daa5b1789abd934e868c3a8142a0c8f673a8a11bb45620c038d7bb0d5e4544a258072da0d943d072cb8a7a5f8708768041f37e687
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpamWj:bm74zYcgT/Ekn0ryfjRmA
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker
-
Size
44KB
-
MD5
6cc89c858529c5ab937d7dded32f76c7
-
SHA1
e8fad2002b8ec19a4e3069861c0973366ad54011
-
SHA256
d98285e89f97340565b1f0d99ecffdc5b7dff41c3e3dd117caf10f38ad5c2e0b
-
SHA512
d1d748395c26ae369946f30daa5b1789abd934e868c3a8142a0c8f673a8a11bb45620c038d7bb0d5e4544a258072da0d943d072cb8a7a5f8708768041f37e687
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpamWj:bm74zYcgT/Ekn0ryfjRmA
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-