Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-14_5010bfc7295d5d7a823b1b27bef4f8af_cryptolocker
-
Size
47KB
-
Sample
240614-x6n5mswhrk
-
MD5
5010bfc7295d5d7a823b1b27bef4f8af
-
SHA1
6ed6e1f64571ce6c4e2422b5bf44cd9d4d47cbbb
-
SHA256
ec3d7e17790542be338910902310989e0c00f24c40c1cf6107cbf065a38b1ffe
-
SHA512
b0a33eeb235285f3adb26cb3c5d5688304af0cc5fe2c72c9aefca60f881a85591d063852a1400b1f0754853bcd3326263379d66e15623d00f791094710a7da89
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3ULn:79mqyNhQMOtEvwDpjBzckqUL
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_5010bfc7295d5d7a823b1b27bef4f8af_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-14_5010bfc7295d5d7a823b1b27bef4f8af_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-14_5010bfc7295d5d7a823b1b27bef4f8af_cryptolocker
-
Size
47KB
-
MD5
5010bfc7295d5d7a823b1b27bef4f8af
-
SHA1
6ed6e1f64571ce6c4e2422b5bf44cd9d4d47cbbb
-
SHA256
ec3d7e17790542be338910902310989e0c00f24c40c1cf6107cbf065a38b1ffe
-
SHA512
b0a33eeb235285f3adb26cb3c5d5688304af0cc5fe2c72c9aefca60f881a85591d063852a1400b1f0754853bcd3326263379d66e15623d00f791094710a7da89
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3ULn:79mqyNhQMOtEvwDpjBzckqUL
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-