Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-11_effc4d415d809dd43996c25aa0aa295e_cryptolocker
-
Size
43KB
-
Sample
240211-q4m18sag75
-
MD5
effc4d415d809dd43996c25aa0aa295e
-
SHA1
5429ab64a454d2cfc4324c9cad0af2d7547901b0
-
SHA256
2cdb7785584eccf1f20644191964ee939a5b4d603a5ae661203ec969657479b5
-
SHA512
6a0ba03946779ebb34d48b549aa57e3fedf0d715508f6a3b35d3939c0810f1a7ddddb304001e7ecddf358e6e4dd07278f70aa539a74005ea08dfbbb36918a07c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66nkpb1:vj+jsMQMOtEvwDpj5HW5IiB
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-11_effc4d415d809dd43996c25aa0aa295e_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-11_effc4d415d809dd43996c25aa0aa295e_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-11_effc4d415d809dd43996c25aa0aa295e_cryptolocker
-
Size
43KB
-
MD5
effc4d415d809dd43996c25aa0aa295e
-
SHA1
5429ab64a454d2cfc4324c9cad0af2d7547901b0
-
SHA256
2cdb7785584eccf1f20644191964ee939a5b4d603a5ae661203ec969657479b5
-
SHA512
6a0ba03946779ebb34d48b549aa57e3fedf0d715508f6a3b35d3939c0810f1a7ddddb304001e7ecddf358e6e4dd07278f70aa539a74005ea08dfbbb36918a07c
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66nkpb1:vj+jsMQMOtEvwDpj5HW5IiB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-