Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker
-
Size
71KB
-
Sample
240610-mtbnnsgb6v
-
MD5
0af184dc6d2b5c1a1ea944d7d635fb3b
-
SHA1
738aec0b7c6fa6186264b082f543d22c64046f18
-
SHA256
c281edbcf4d90093063794de02d2b3bad397eea3d977ff98307de773dc54b425
-
SHA512
fc86d679f9138cd8171f33642ff27edf381163c18997ebfc7fcd058f4b9d77b2d7ff218e2b3e892f09a6f8ca07896fe419cb31b06c370455cae33aa4e48580b8
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO2:DW60sllyWOtEvwDpjwF85V
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker
-
Size
71KB
-
MD5
0af184dc6d2b5c1a1ea944d7d635fb3b
-
SHA1
738aec0b7c6fa6186264b082f543d22c64046f18
-
SHA256
c281edbcf4d90093063794de02d2b3bad397eea3d977ff98307de773dc54b425
-
SHA512
fc86d679f9138cd8171f33642ff27edf381163c18997ebfc7fcd058f4b9d77b2d7ff218e2b3e892f09a6f8ca07896fe419cb31b06c370455cae33aa4e48580b8
-
SSDEEP
1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO2:DW60sllyWOtEvwDpjwF85V
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-