Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-09_d9a26b386a86c1656d1c4a73f07840d1_cryptolocker
-
Size
42KB
-
Sample
240309-1tdd6abg44
-
MD5
d9a26b386a86c1656d1c4a73f07840d1
-
SHA1
af60219ff56e26d745dd00c1477f50b83ff14320
-
SHA256
d143de38138355352bfc402be7dcd162ed401a31dc6452791667cde020d92a27
-
SHA512
e262ad1e17c506abb0a70cf3e14b033144f40d561a8928192d3c26e0b449bb508d4b72fee0b98e36b45fe7dd73f06f3bb9a0ee597dd10e135bb75c59d79aa035
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPCQ:btB9g/xtCSKfxLIc/X
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_d9a26b386a86c1656d1c4a73f07840d1_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_d9a26b386a86c1656d1c4a73f07840d1_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_d9a26b386a86c1656d1c4a73f07840d1_cryptolocker
-
Size
42KB
-
MD5
d9a26b386a86c1656d1c4a73f07840d1
-
SHA1
af60219ff56e26d745dd00c1477f50b83ff14320
-
SHA256
d143de38138355352bfc402be7dcd162ed401a31dc6452791667cde020d92a27
-
SHA512
e262ad1e17c506abb0a70cf3e14b033144f40d561a8928192d3c26e0b449bb508d4b72fee0b98e36b45fe7dd73f06f3bb9a0ee597dd10e135bb75c59d79aa035
-
SSDEEP
768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJPCQ:btB9g/xtCSKfxLIc/X
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-