Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-28_b056add30610287691460e958096422e_cryptolocker
-
Size
46KB
-
Sample
240228-2d7thafd4z
-
MD5
b056add30610287691460e958096422e
-
SHA1
efe351130ebe79c8eb4c081b8588e5e4499339a1
-
SHA256
f25d40e1767be77e4145cb59c1e45634c7e8c81d641c53a975f2635e63245934
-
SHA512
422ddcad4e0205fe5511118d40aa12c047d827867e189cb174a76fe2409480e78d2eba398e79ce3426edf28472265c0d614bee4f7dc44c736857e26ca93bc322
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4X:btB9g/xtCSKfxLIc/C4X
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_b056add30610287691460e958096422e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_b056add30610287691460e958096422e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-28_b056add30610287691460e958096422e_cryptolocker
-
Size
46KB
-
MD5
b056add30610287691460e958096422e
-
SHA1
efe351130ebe79c8eb4c081b8588e5e4499339a1
-
SHA256
f25d40e1767be77e4145cb59c1e45634c7e8c81d641c53a975f2635e63245934
-
SHA512
422ddcad4e0205fe5511118d40aa12c047d827867e189cb174a76fe2409480e78d2eba398e79ce3426edf28472265c0d614bee4f7dc44c736857e26ca93bc322
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4X:btB9g/xtCSKfxLIc/C4X
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-