Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-06_9b1af847dba5ce7e7b071c196c28b6f7_cryptolocker
-
Size
48KB
-
Sample
240606-ggksxsag35
-
MD5
9b1af847dba5ce7e7b071c196c28b6f7
-
SHA1
ce13441e15586dda67ed6b0e5b411731ed6affeb
-
SHA256
0984d523b7e9d5d5eee74fad5cb567e50844481dcce1c7808b4a111bd15c6452
-
SHA512
b6298f0a6dd2d58c66fbbd837b9cf9b073fc5dd6f5a19429117c24b42e31bcbcc18ed66b9e1ebc87db1bcab91b31f79cc7147d5c0524db87fa88175889ae6304
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+z:bIDOw9a0Dwo3P1ojvUSD4PInyDi
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-06_9b1af847dba5ce7e7b071c196c28b6f7_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-06_9b1af847dba5ce7e7b071c196c28b6f7_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-06_9b1af847dba5ce7e7b071c196c28b6f7_cryptolocker
-
Size
48KB
-
MD5
9b1af847dba5ce7e7b071c196c28b6f7
-
SHA1
ce13441e15586dda67ed6b0e5b411731ed6affeb
-
SHA256
0984d523b7e9d5d5eee74fad5cb567e50844481dcce1c7808b4a111bd15c6452
-
SHA512
b6298f0a6dd2d58c66fbbd837b9cf9b073fc5dd6f5a19429117c24b42e31bcbcc18ed66b9e1ebc87db1bcab91b31f79cc7147d5c0524db87fa88175889ae6304
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+z:bIDOw9a0Dwo3P1ojvUSD4PInyDi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-