Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-30_63ee7ae0af540dfefecd9cd97526a07d_cryptolocker
-
Size
78KB
-
Sample
240630-dyscjswhlk
-
MD5
63ee7ae0af540dfefecd9cd97526a07d
-
SHA1
37fdb719fd7d23bf71b38a8aac2ab99a1f28a2fb
-
SHA256
1a3eed016f40984e27cd2a6ed46d3316fb9e2885bbe85f4f8be567b03d642f77
-
SHA512
bc9cf06048732f453681754ab8dc486bf85c48a387c870f653338b8b8dd6a35dc3c9a6fae18c12846bfef6187aaeb29e11d6f5892017ba99523b10359e3bdc35
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktH:X6a+SOtEvwDpjBZYvQd2u
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-30_63ee7ae0af540dfefecd9cd97526a07d_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-30_63ee7ae0af540dfefecd9cd97526a07d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-30_63ee7ae0af540dfefecd9cd97526a07d_cryptolocker
-
Size
78KB
-
MD5
63ee7ae0af540dfefecd9cd97526a07d
-
SHA1
37fdb719fd7d23bf71b38a8aac2ab99a1f28a2fb
-
SHA256
1a3eed016f40984e27cd2a6ed46d3316fb9e2885bbe85f4f8be567b03d642f77
-
SHA512
bc9cf06048732f453681754ab8dc486bf85c48a387c870f653338b8b8dd6a35dc3c9a6fae18c12846bfef6187aaeb29e11d6f5892017ba99523b10359e3bdc35
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktH:X6a+SOtEvwDpjBZYvQd2u
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-