Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-23_f58d7b2f054ef18f88ab0329c337aa36_cryptolocker
-
Size
38KB
-
Sample
240223-namr9sff67
-
MD5
f58d7b2f054ef18f88ab0329c337aa36
-
SHA1
7ddf66b8de589cb34d2c0a4df0baa39a56dcab22
-
SHA256
e54edd9b980f9e3a367276aa60727bd43532a9eabe393748f617a1337f60d4a7
-
SHA512
2940eaf786b6b2ff3e17c139a4981c9fbe4615b856fee622f23ba9c65aefa12b9cc8d6b647388d5a341823efd116aef882a177fcc8c5e1ffe4ba841fce89d881
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xcN:bIDOw9a0Dwo3P1ojvUSD79A
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-23_f58d7b2f054ef18f88ab0329c337aa36_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-23_f58d7b2f054ef18f88ab0329c337aa36_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-23_f58d7b2f054ef18f88ab0329c337aa36_cryptolocker
-
Size
38KB
-
MD5
f58d7b2f054ef18f88ab0329c337aa36
-
SHA1
7ddf66b8de589cb34d2c0a4df0baa39a56dcab22
-
SHA256
e54edd9b980f9e3a367276aa60727bd43532a9eabe393748f617a1337f60d4a7
-
SHA512
2940eaf786b6b2ff3e17c139a4981c9fbe4615b856fee622f23ba9c65aefa12b9cc8d6b647388d5a341823efd116aef882a177fcc8c5e1ffe4ba841fce89d881
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9xcN:bIDOw9a0Dwo3P1ojvUSD79A
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-