Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-04_fcfaf6743126f37a04d25ca4b2f8d16c_cryptolocker
-
Size
39KB
-
Sample
240604-1rpdmsde73
-
MD5
fcfaf6743126f37a04d25ca4b2f8d16c
-
SHA1
d1941a165fd1f59c1ed8d99cd8387ac8fa91e1bc
-
SHA256
4abd3cd8adba74f2452a767d30b33f84e5caf144d86b1df972d640668f37993a
-
SHA512
e79e7c19f22619c1728678993b326aff9a236e24af126c5fa663e5c2d4e0495e647d604a304e05f9fe008f2598229558b4d8ccef7e9996596da8887ade301d7d
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZy6:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_fcfaf6743126f37a04d25ca4b2f8d16c_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-04_fcfaf6743126f37a04d25ca4b2f8d16c_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-04_fcfaf6743126f37a04d25ca4b2f8d16c_cryptolocker
-
Size
39KB
-
MD5
fcfaf6743126f37a04d25ca4b2f8d16c
-
SHA1
d1941a165fd1f59c1ed8d99cd8387ac8fa91e1bc
-
SHA256
4abd3cd8adba74f2452a767d30b33f84e5caf144d86b1df972d640668f37993a
-
SHA512
e79e7c19f22619c1728678993b326aff9a236e24af126c5fa663e5c2d4e0495e647d604a304e05f9fe008f2598229558b4d8ccef7e9996596da8887ade301d7d
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZy6:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-