Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-20_6a3976af618661c489d3117a4ee12646_cryptolocker
-
Size
37KB
-
Sample
240220-prqe6aga9y
-
MD5
6a3976af618661c489d3117a4ee12646
-
SHA1
fb1d4518f3fcaacc3d9d902fc5f7accb59b546ba
-
SHA256
486c3e4ee6546f07a26ad2bdf41934c97a27b5ee2242fc4452e4acab3feacb46
-
SHA512
026e91bc25278baad9eac667296cc35e5aa6fffd5c17c96004791959a40f90c28d64b1327c439b51a0cea46e4bf7890a8e4714cc85dc8386983cbe7a7bcd94ff
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/04qXZ:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/8Z
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-20_6a3976af618661c489d3117a4ee12646_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-20_6a3976af618661c489d3117a4ee12646_cryptolocker.exe
Resource
win10v2004-20240220-en
Malware Config
Targets
-
-
Target
2024-02-20_6a3976af618661c489d3117a4ee12646_cryptolocker
-
Size
37KB
-
MD5
6a3976af618661c489d3117a4ee12646
-
SHA1
fb1d4518f3fcaacc3d9d902fc5f7accb59b546ba
-
SHA256
486c3e4ee6546f07a26ad2bdf41934c97a27b5ee2242fc4452e4acab3feacb46
-
SHA512
026e91bc25278baad9eac667296cc35e5aa6fffd5c17c96004791959a40f90c28d64b1327c439b51a0cea46e4bf7890a8e4714cc85dc8386983cbe7a7bcd94ff
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/04qXZ:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/8Z
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-