Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-02_cfc401e3f03c29895e012b3cc146bc94_cryptolocker
-
Size
73KB
-
Sample
240202-dbatzseebn
-
MD5
cfc401e3f03c29895e012b3cc146bc94
-
SHA1
1e772f381749915805c41d2210ae61c9e094f7b1
-
SHA256
a1145b9f28f005f5accbee42a03a2b379d13d13282b12deb54bda97dd12b6d89
-
SHA512
175ed26d51af8ea2d0d86dfc545ab31ac4e1b04064da7d57b8bf550c0be2cecea83886291645d3c6c0040714095f7da58ab34a363e9928198b8736d928ec49e1
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Rz:X6a+SOtEvwDpjBZYvQd2F
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_cfc401e3f03c29895e012b3cc146bc94_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_cfc401e3f03c29895e012b3cc146bc94_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-02_cfc401e3f03c29895e012b3cc146bc94_cryptolocker
-
Size
73KB
-
MD5
cfc401e3f03c29895e012b3cc146bc94
-
SHA1
1e772f381749915805c41d2210ae61c9e094f7b1
-
SHA256
a1145b9f28f005f5accbee42a03a2b379d13d13282b12deb54bda97dd12b6d89
-
SHA512
175ed26d51af8ea2d0d86dfc545ab31ac4e1b04064da7d57b8bf550c0be2cecea83886291645d3c6c0040714095f7da58ab34a363e9928198b8736d928ec49e1
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Rz:X6a+SOtEvwDpjBZYvQd2F
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-