Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-08_d39be122e002879b51f0c37bc498e76e_cryptolocker
-
Size
49KB
-
Sample
240608-zlwp4aga7v
-
MD5
d39be122e002879b51f0c37bc498e76e
-
SHA1
56d94189d90e46a8dcc20f245b4a68953f4e181e
-
SHA256
f57c24c7461d67e55443fd09f1435b75947e2a0fa373317aef0158b2f9d779ed
-
SHA512
97ce24a8007cefa0f8e811706a99d3e81764b1a7c5b8789a94f2cc96bac711fbdc2fe7e330e7adcef354d61e76a29afeeadf83dbb16b17b1d70d492a83029527
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LM:79mqyNhQMOtEvwDpjBzckqSuw
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-08_d39be122e002879b51f0c37bc498e76e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-08_d39be122e002879b51f0c37bc498e76e_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-08_d39be122e002879b51f0c37bc498e76e_cryptolocker
-
Size
49KB
-
MD5
d39be122e002879b51f0c37bc498e76e
-
SHA1
56d94189d90e46a8dcc20f245b4a68953f4e181e
-
SHA256
f57c24c7461d67e55443fd09f1435b75947e2a0fa373317aef0158b2f9d779ed
-
SHA512
97ce24a8007cefa0f8e811706a99d3e81764b1a7c5b8789a94f2cc96bac711fbdc2fe7e330e7adcef354d61e76a29afeeadf83dbb16b17b1d70d492a83029527
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Sp8LM:79mqyNhQMOtEvwDpjBzckqSuw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-