Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-05_41e1899ad2339a6b7aab49214515421d_cryptolocker
-
Size
53KB
-
Sample
240305-1dpr9ahh6z
-
MD5
41e1899ad2339a6b7aab49214515421d
-
SHA1
d8317f4995ff72be638c5d32ef81d700ac6b5f06
-
SHA256
553ae1b418199f5c21ee4c7533043de2add0edad3ed271dcfbb137cb0cf35e21
-
SHA512
3a8459bfff195606bb2da0da5b3dce109eafdaa67fe667e279bb217097b09f88186bbfbeaa1cc805600282c211bc2c9c11eb70001168c2088ce5cf8a65a04214
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTyms:bIDOw9a0DwitDZzcT2s
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_41e1899ad2339a6b7aab49214515421d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_41e1899ad2339a6b7aab49214515421d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-05_41e1899ad2339a6b7aab49214515421d_cryptolocker
-
Size
53KB
-
MD5
41e1899ad2339a6b7aab49214515421d
-
SHA1
d8317f4995ff72be638c5d32ef81d700ac6b5f06
-
SHA256
553ae1b418199f5c21ee4c7533043de2add0edad3ed271dcfbb137cb0cf35e21
-
SHA512
3a8459bfff195606bb2da0da5b3dce109eafdaa67fe667e279bb217097b09f88186bbfbeaa1cc805600282c211bc2c9c11eb70001168c2088ce5cf8a65a04214
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9XbTbmhTyms:bIDOw9a0DwitDZzcT2s
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-