Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-14_32f47233e01d3c2ec8da0df554e433d5_cryptolocker
-
Size
79KB
-
Sample
240214-nsgnzahc6t
-
MD5
32f47233e01d3c2ec8da0df554e433d5
-
SHA1
3e0f5efb755d17df061636caf1ab23f6d2009286
-
SHA256
d0226d66df568f6dc21355206cad3a9fc7e38a510a0e8df86d2eace2bd6d3752
-
SHA512
3f6f593d786e87d7663d254564aaa9241d5c4e31c6822e3a67d21753ad7dde97266f8b37940cebbb5ee9bf69ec16a72615e47e2abe74d792ac5826729d464051
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNxl:vCjsIOtEvwDpj5H9YvQd2N
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_32f47233e01d3c2ec8da0df554e433d5_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_32f47233e01d3c2ec8da0df554e433d5_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_32f47233e01d3c2ec8da0df554e433d5_cryptolocker
-
Size
79KB
-
MD5
32f47233e01d3c2ec8da0df554e433d5
-
SHA1
3e0f5efb755d17df061636caf1ab23f6d2009286
-
SHA256
d0226d66df568f6dc21355206cad3a9fc7e38a510a0e8df86d2eace2bd6d3752
-
SHA512
3f6f593d786e87d7663d254564aaa9241d5c4e31c6822e3a67d21753ad7dde97266f8b37940cebbb5ee9bf69ec16a72615e47e2abe74d792ac5826729d464051
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNxl:vCjsIOtEvwDpj5H9YvQd2N
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-