Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-29_4dc90cd97918cf06c09a3af83050bb7a_cryptolocker
-
Size
48KB
-
Sample
240629-e82vea1crb
-
MD5
4dc90cd97918cf06c09a3af83050bb7a
-
SHA1
58a8068d45a3111f724f9c5b4d69f8f3a13befa7
-
SHA256
6eae95c6b6a21a39035e2816b40778610ca8d1c747a6af97935ea95408d6c2c0
-
SHA512
d502b0f20c21dfeba9f1311f318fdf0a273ae9cd48b7cf8a4a89980fe265b71d03399819c784bcfa8674da9dac9ead0fc3533719d4140b21860029018bd52414
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPck:P6QFElP6k+MRQMOtEvwDpjBQpVXE
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_4dc90cd97918cf06c09a3af83050bb7a_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-29_4dc90cd97918cf06c09a3af83050bb7a_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-29_4dc90cd97918cf06c09a3af83050bb7a_cryptolocker
-
Size
48KB
-
MD5
4dc90cd97918cf06c09a3af83050bb7a
-
SHA1
58a8068d45a3111f724f9c5b4d69f8f3a13befa7
-
SHA256
6eae95c6b6a21a39035e2816b40778610ca8d1c747a6af97935ea95408d6c2c0
-
SHA512
d502b0f20c21dfeba9f1311f318fdf0a273ae9cd48b7cf8a4a89980fe265b71d03399819c784bcfa8674da9dac9ead0fc3533719d4140b21860029018bd52414
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPck:P6QFElP6k+MRQMOtEvwDpjBQpVXE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-