Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-07_21828b08bbfc6b19e7978d183010ce70_cryptolocker
-
Size
32KB
-
Sample
240307-f62bjaef75
-
MD5
21828b08bbfc6b19e7978d183010ce70
-
SHA1
71ceb05a5d219e8002e9584698de3043ee540029
-
SHA256
d2642177448ec89330a7314bfa4fc5b09f37daa95188ba3b256c04c0945b3c8f
-
SHA512
58fd5c6c73680ebe4013c6d93b02e55caf39ee0736fb8df636ef78878c74d2db89fc0abf614c766d7bec8ae81763933684366e4176aaca1e4e4de25ab078d0d3
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz9tdA9:bAvJCYOOvbRPDEgXRc3SSz3dA9
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-07_21828b08bbfc6b19e7978d183010ce70_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-07_21828b08bbfc6b19e7978d183010ce70_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-07_21828b08bbfc6b19e7978d183010ce70_cryptolocker
-
Size
32KB
-
MD5
21828b08bbfc6b19e7978d183010ce70
-
SHA1
71ceb05a5d219e8002e9584698de3043ee540029
-
SHA256
d2642177448ec89330a7314bfa4fc5b09f37daa95188ba3b256c04c0945b3c8f
-
SHA512
58fd5c6c73680ebe4013c6d93b02e55caf39ee0736fb8df636ef78878c74d2db89fc0abf614c766d7bec8ae81763933684366e4176aaca1e4e4de25ab078d0d3
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz9tdA9:bAvJCYOOvbRPDEgXRc3SSz3dA9
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-