Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-18_4514b240a2b56dc9f4be056d968bb3b5_cryptolocker
-
Size
47KB
-
Sample
240218-hbmwrseh7w
-
MD5
4514b240a2b56dc9f4be056d968bb3b5
-
SHA1
66c70b813b214d26597b13078de6951f770aecae
-
SHA256
830eb2cf0324cc27da428a82fb4a97dc1a919e1486995a66d61db7e359f23ca0
-
SHA512
c4be838b122d13896d0a45af637ffef5c0534db8da809b654d965e478114975fe263c5a3903c28157b2c8ca7f8b4d7497b9f3b00642d44d7be26e2c2e1944a55
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxV:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xk
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_4514b240a2b56dc9f4be056d968bb3b5_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-18_4514b240a2b56dc9f4be056d968bb3b5_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-18_4514b240a2b56dc9f4be056d968bb3b5_cryptolocker
-
Size
47KB
-
MD5
4514b240a2b56dc9f4be056d968bb3b5
-
SHA1
66c70b813b214d26597b13078de6951f770aecae
-
SHA256
830eb2cf0324cc27da428a82fb4a97dc1a919e1486995a66d61db7e359f23ca0
-
SHA512
c4be838b122d13896d0a45af637ffef5c0534db8da809b654d965e478114975fe263c5a3903c28157b2c8ca7f8b4d7497b9f3b00642d44d7be26e2c2e1944a55
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxV:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xk
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-