Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_21fe39a99c04aaceb5a9b4aaf2b13be8_cryptolocker
-
Size
48KB
-
Sample
240221-v1f6qscb4z
-
MD5
21fe39a99c04aaceb5a9b4aaf2b13be8
-
SHA1
6b8c486e338a946586d4b6e7f6082898e625386e
-
SHA256
22a97b0059c17b5f1d1030cfe15c60bd1400f249cbc8d7daa9e35d83ea1136ae
-
SHA512
d039d247df5cb786720bcd50657e5b01aa65bb5034e4ad76dd7b0607ff7270931f276b8ab8948ca817c81e3fd12f7b4453dc5580c44759e972e3c90d3dee1bd5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZU1:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLu
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_21fe39a99c04aaceb5a9b4aaf2b13be8_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_21fe39a99c04aaceb5a9b4aaf2b13be8_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_21fe39a99c04aaceb5a9b4aaf2b13be8_cryptolocker
-
Size
48KB
-
MD5
21fe39a99c04aaceb5a9b4aaf2b13be8
-
SHA1
6b8c486e338a946586d4b6e7f6082898e625386e
-
SHA256
22a97b0059c17b5f1d1030cfe15c60bd1400f249cbc8d7daa9e35d83ea1136ae
-
SHA512
d039d247df5cb786720bcd50657e5b01aa65bb5034e4ad76dd7b0607ff7270931f276b8ab8948ca817c81e3fd12f7b4453dc5580c44759e972e3c90d3dee1bd5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZU1:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-