Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker
-
Size
44KB
-
Sample
240218-w6gvwsde9z
-
MD5
3ec71fa9edb30a5e9d737e364da24826
-
SHA1
48d5838b338d5c445b654980b74fa9ddd860fa3a
-
SHA256
dcb4b2788acda77aa54d204477fd0214c1cc2ef6c8af70834bea6cbd0cbc4f72
-
SHA512
76c67b8c091f5773300d5b832c43408978b5c6a1cf3c62444d4fcea348454e3068a59a247f61201b3d76616b7517addd54a36c29f3554bfcf8495cb141b350a5
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XC
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker
-
Size
44KB
-
MD5
3ec71fa9edb30a5e9d737e364da24826
-
SHA1
48d5838b338d5c445b654980b74fa9ddd860fa3a
-
SHA256
dcb4b2788acda77aa54d204477fd0214c1cc2ef6c8af70834bea6cbd0cbc4f72
-
SHA512
76c67b8c091f5773300d5b832c43408978b5c6a1cf3c62444d4fcea348454e3068a59a247f61201b3d76616b7517addd54a36c29f3554bfcf8495cb141b350a5
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XC
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-