Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-29_38155ce3138dee13a79b87ddded60134_cryptolocker
-
Size
40KB
-
Sample
240229-fbwgssdf48
-
MD5
38155ce3138dee13a79b87ddded60134
-
SHA1
c4c21fe841b9ff79c7f6cae17c00ac19f556c6a0
-
SHA256
51f126d08fc2479dd09583e4cec8cd3ec1c2ec2552623cbe7e3b18dcc69276f5
-
SHA512
e2ce3290caafdc52334e158a46565d0eb76f2036447a2eb72e1a04bd806b2a295accefbff004fb8ec5d7696c155e4a4e8b6038a315903256e8d33c8b91b082d9
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DySWW:bIDOw9a0Dwo3P1ojvUSDX
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_38155ce3138dee13a79b87ddded60134_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-29_38155ce3138dee13a79b87ddded60134_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-02-29_38155ce3138dee13a79b87ddded60134_cryptolocker
-
Size
40KB
-
MD5
38155ce3138dee13a79b87ddded60134
-
SHA1
c4c21fe841b9ff79c7f6cae17c00ac19f556c6a0
-
SHA256
51f126d08fc2479dd09583e4cec8cd3ec1c2ec2552623cbe7e3b18dcc69276f5
-
SHA512
e2ce3290caafdc52334e158a46565d0eb76f2036447a2eb72e1a04bd806b2a295accefbff004fb8ec5d7696c155e4a4e8b6038a315903256e8d33c8b91b082d9
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DySWW:bIDOw9a0Dwo3P1ojvUSDX
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-