Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-03_4a7a77b785db123cae23640bd483e8f8_cryptolocker
-
Size
38KB
-
Sample
240603-d64qjshh4z
-
MD5
4a7a77b785db123cae23640bd483e8f8
-
SHA1
6357aa1c336afbbdb885dbe29ec50c4afa739ee4
-
SHA256
7c4bd5af90cb4de9499ca4bbabdf124d71842437e6415c1211f02f9064e31813
-
SHA512
deac7fbbe7e48d178e1d0227f8195ca81a15d0e58f1d0e449fc7c923c7a9879ef90614c36dc86caaae3a29be8f6bdc5ecc242d945af423cfd3abaa3685c74a84
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0U7:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_4a7a77b785db123cae23640bd483e8f8_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-03_4a7a77b785db123cae23640bd483e8f8_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-03_4a7a77b785db123cae23640bd483e8f8_cryptolocker
-
Size
38KB
-
MD5
4a7a77b785db123cae23640bd483e8f8
-
SHA1
6357aa1c336afbbdb885dbe29ec50c4afa739ee4
-
SHA256
7c4bd5af90cb4de9499ca4bbabdf124d71842437e6415c1211f02f9064e31813
-
SHA512
deac7fbbe7e48d178e1d0227f8195ca81a15d0e58f1d0e449fc7c923c7a9879ef90614c36dc86caaae3a29be8f6bdc5ecc242d945af423cfd3abaa3685c74a84
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0U7:o1KhxqwtdgI2MyzNORQtOflIwoHNV2X4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-