Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker
-
Size
45KB
-
Sample
240624-lwrx1aweme
-
MD5
e7538291ce50edb0de475e58a2d97425
-
SHA1
fbca3b9150a7f93638f0706f120d4ff9a4fe8433
-
SHA256
cfc3b89924427ebfbc3239ee201b66050b2d8fbd6365b842563dff86ec7cd7da
-
SHA512
96d2cff8a1ea7b5f97ba96e989b92cdf18b8d55c2e303b4b4ced1ef2308dd1fb5356e28e4cbafa6b9141c52770ab4a24050244647503740dc72a25844994d2db
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NY:bm74zYcgT/EkM0ryfjd3WY
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker
-
Size
45KB
-
MD5
e7538291ce50edb0de475e58a2d97425
-
SHA1
fbca3b9150a7f93638f0706f120d4ff9a4fe8433
-
SHA256
cfc3b89924427ebfbc3239ee201b66050b2d8fbd6365b842563dff86ec7cd7da
-
SHA512
96d2cff8a1ea7b5f97ba96e989b92cdf18b8d55c2e303b4b4ced1ef2308dd1fb5356e28e4cbafa6b9141c52770ab4a24050244647503740dc72a25844994d2db
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NY:bm74zYcgT/EkM0ryfjd3WY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-