Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker
-
Size
126KB
-
Sample
240310-gzslgsdh82
-
MD5
a17adb185115eabf5cecad040dcbae91
-
SHA1
bf3324fb3eecdb7528ef5ace5399bf49bb99a078
-
SHA256
966eaa0ec90a757297f213faf4403db6f50e3a3fd26face1899a08370b0103e3
-
SHA512
12a9ed82b63f6078a6c6f5c59655cf6a4c36e031ae09603ffdf8e9c48853df6a5ed5b7e23a39800704a415dc7b201a4d04b080a2b693136f76828a4bcd9c6e74
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVY:vCA9OtEvwDpjq
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker
-
Size
126KB
-
MD5
a17adb185115eabf5cecad040dcbae91
-
SHA1
bf3324fb3eecdb7528ef5ace5399bf49bb99a078
-
SHA256
966eaa0ec90a757297f213faf4403db6f50e3a3fd26face1899a08370b0103e3
-
SHA512
12a9ed82b63f6078a6c6f5c59655cf6a4c36e031ae09603ffdf8e9c48853df6a5ed5b7e23a39800704a415dc7b201a4d04b080a2b693136f76828a4bcd9c6e74
-
SSDEEP
1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVY:vCA9OtEvwDpjq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-