Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-24_f9e6cc818957d55e6d56a8134b1d65fa_cryptolocker
-
Size
46KB
-
Sample
240124-w588rafebl
-
MD5
f9e6cc818957d55e6d56a8134b1d65fa
-
SHA1
f22141017f4878f26aeead42b64a8153b76d0da9
-
SHA256
4e63c60d56e018d1e4ba0c7cab9dbf770e277233b7bf4424b190a81acb2fbf93
-
SHA512
7481cdcfb2fefc25e808e6dd2d674d933a9ee868ad4c70f46dcea3f30ba9d35aeec15818327a368314e217528aca0ab31cc2854350ecba394a54b92aefea57b2
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddV:bgGYcA/53GAA6y37Q6ddV
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-24_f9e6cc818957d55e6d56a8134b1d65fa_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-24_f9e6cc818957d55e6d56a8134b1d65fa_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-24_f9e6cc818957d55e6d56a8134b1d65fa_cryptolocker
-
Size
46KB
-
MD5
f9e6cc818957d55e6d56a8134b1d65fa
-
SHA1
f22141017f4878f26aeead42b64a8153b76d0da9
-
SHA256
4e63c60d56e018d1e4ba0c7cab9dbf770e277233b7bf4424b190a81acb2fbf93
-
SHA512
7481cdcfb2fefc25e808e6dd2d674d933a9ee868ad4c70f46dcea3f30ba9d35aeec15818327a368314e217528aca0ab31cc2854350ecba394a54b92aefea57b2
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6ddV:bgGYcA/53GAA6y37Q6ddV
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-