Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-29_67781002f7b29b76a50c9b8262ff79f5_cryptolocker
-
Size
53KB
-
Sample
240229-ebd23scf77
-
MD5
67781002f7b29b76a50c9b8262ff79f5
-
SHA1
ee98e5b0231e73feb33998113b01ddf23e8e8a33
-
SHA256
afc334399b3e3b44fb28b0f069c134ccf4149da03e4e187fe3036b40e1061d50
-
SHA512
2f5db463ce9002396700ddcf2c31d40db89770a583ecdafc20d60e0ac176d3946cde7a2b2538b02e3c024085cc20aafc4166326f44c0bea0065fef2f1407b0e5
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTY:bIDOw9a0DwitDZzcTh
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_67781002f7b29b76a50c9b8262ff79f5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_67781002f7b29b76a50c9b8262ff79f5_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-29_67781002f7b29b76a50c9b8262ff79f5_cryptolocker
-
Size
53KB
-
MD5
67781002f7b29b76a50c9b8262ff79f5
-
SHA1
ee98e5b0231e73feb33998113b01ddf23e8e8a33
-
SHA256
afc334399b3e3b44fb28b0f069c134ccf4149da03e4e187fe3036b40e1061d50
-
SHA512
2f5db463ce9002396700ddcf2c31d40db89770a583ecdafc20d60e0ac176d3946cde7a2b2538b02e3c024085cc20aafc4166326f44c0bea0065fef2f1407b0e5
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTY:bIDOw9a0DwitDZzcTh
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-