Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker
-
Size
34KB
-
Sample
240223-kpztlaee37
-
MD5
f628f609479bd993f732fd8b2df2922f
-
SHA1
4b0e452de6224f6267e2e503bb9fcde0d9c095bd
-
SHA256
a138f97df51916083b0537cbf5f38edcb71d2a7d5bc78c861fab671779240347
-
SHA512
b5349dccd07e60eb7bc017fab130b2c89dc7df9a9f5941e2494a47a4c95e83fc29d2c96466651fce96576a1aaf9b81b32c6fde9becb54cb7a662c033c23e7361
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVM:bA74zYcgT/Ekd0ryfjPIunYwK
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker
-
Size
34KB
-
MD5
f628f609479bd993f732fd8b2df2922f
-
SHA1
4b0e452de6224f6267e2e503bb9fcde0d9c095bd
-
SHA256
a138f97df51916083b0537cbf5f38edcb71d2a7d5bc78c861fab671779240347
-
SHA512
b5349dccd07e60eb7bc017fab130b2c89dc7df9a9f5941e2494a47a4c95e83fc29d2c96466651fce96576a1aaf9b81b32c6fde9becb54cb7a662c033c23e7361
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVM:bA74zYcgT/Ekd0ryfjPIunYwK
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-