Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker
-
Size
125KB
-
Sample
240122-zgxftsdga3
-
MD5
a86efb57451e90650026731d06fda140
-
SHA1
2de0591bb5e43f5cd4ab7fcfc9ddd016bc4c6bc8
-
SHA256
97013f2b3f725393844c617dc2fc82d6701fde7134f5c9e913faa68ace603b5c
-
SHA512
c40f6f79a0850b1138c8863a7064a4741155c592ac8e4a00ef993978b19bb227d5688c050488fb509cd9c664673d05a27be2f1d029efc552780868cb6ec5cdd8
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//W:vCjsIOtEvwDpj5H9YvQd2RU
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker
-
Size
125KB
-
MD5
a86efb57451e90650026731d06fda140
-
SHA1
2de0591bb5e43f5cd4ab7fcfc9ddd016bc4c6bc8
-
SHA256
97013f2b3f725393844c617dc2fc82d6701fde7134f5c9e913faa68ace603b5c
-
SHA512
c40f6f79a0850b1138c8863a7064a4741155c592ac8e4a00ef993978b19bb227d5688c050488fb509cd9c664673d05a27be2f1d029efc552780868cb6ec5cdd8
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//W:vCjsIOtEvwDpj5H9YvQd2RU
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-