Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker
-
Size
82KB
-
Sample
240603-ke97ksad93
-
MD5
a0891af499a44f5ad0e216c6913144ce
-
SHA1
878f5a447314f77bcfa75a1520b808c70d39bc5b
-
SHA256
898abc1e77e9e0ca0f6c91c0c87cc2b11cf8886ade6589329f8a07a747ae6f21
-
SHA512
c21d6136ab41a87a47ba3ea7c4c670a0d9f0f8d6e0df61f0ff1ee95bed4ec8b7f4327620f7a7ab539983b78c7e9bf1e30ef184806e12c3233403b7bcb5b47a89
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVN:vCjsIOtEvwDpj5H9YvQd2q
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker
-
Size
82KB
-
MD5
a0891af499a44f5ad0e216c6913144ce
-
SHA1
878f5a447314f77bcfa75a1520b808c70d39bc5b
-
SHA256
898abc1e77e9e0ca0f6c91c0c87cc2b11cf8886ade6589329f8a07a747ae6f21
-
SHA512
c21d6136ab41a87a47ba3ea7c4c670a0d9f0f8d6e0df61f0ff1ee95bed4ec8b7f4327620f7a7ab539983b78c7e9bf1e30ef184806e12c3233403b7bcb5b47a89
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVN:vCjsIOtEvwDpj5H9YvQd2q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-