Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker
-
Size
54KB
-
Sample
240309-xblq2afb56
-
MD5
5e7be9acce715f6d462185933bc1e4f6
-
SHA1
d3e3bc2a7691a9f5b5a5dbdda4a4c1d917812409
-
SHA256
fd27e3d3a13d766d722c5f6ef1e3db0945b12f00207890bb65e1ce7d7e0a35cb
-
SHA512
1bcc859c5073876728b028aa850f137a42807bc0a22f7500d29d6bf552c1bd2c0fdc3cbffde6b5d3be37cce0d66547e0a213d93b8cb633233de4aac9d72dea3d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CCjgB:79mqyNhQMOtEvwDpjBPY7xv3g8OB
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker
-
Size
54KB
-
MD5
5e7be9acce715f6d462185933bc1e4f6
-
SHA1
d3e3bc2a7691a9f5b5a5dbdda4a4c1d917812409
-
SHA256
fd27e3d3a13d766d722c5f6ef1e3db0945b12f00207890bb65e1ce7d7e0a35cb
-
SHA512
1bcc859c5073876728b028aa850f137a42807bc0a22f7500d29d6bf552c1bd2c0fdc3cbffde6b5d3be37cce0d66547e0a213d93b8cb633233de4aac9d72dea3d
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CCjgB:79mqyNhQMOtEvwDpjBPY7xv3g8OB
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-