Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker
-
Size
126KB
-
Sample
240214-bctblsdb7z
-
MD5
d7a3fde46dcaaac056c67ab4e2d5e5d3
-
SHA1
5ded03477a538b22ca16f02bdce69d3cec948596
-
SHA256
508469f03086f5bd339fd8399b34aa866a13acdb18d911fff7e0c24ba44c7d96
-
SHA512
5e2dea93ebc984430b32cbf3e9088d0c324013c6524d9a28c220d6d3d4efdf3206456d85f6b2cf0c139d0392a284a3be9fc2b11e388088d3d9fca7c200e393b0
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpi:vCA9OtEvwDpjG
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker
-
Size
126KB
-
MD5
d7a3fde46dcaaac056c67ab4e2d5e5d3
-
SHA1
5ded03477a538b22ca16f02bdce69d3cec948596
-
SHA256
508469f03086f5bd339fd8399b34aa866a13acdb18d911fff7e0c24ba44c7d96
-
SHA512
5e2dea93ebc984430b32cbf3e9088d0c324013c6524d9a28c220d6d3d4efdf3206456d85f6b2cf0c139d0392a284a3be9fc2b11e388088d3d9fca7c200e393b0
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpi:vCA9OtEvwDpjG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-