Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-13_748bf2f427bc46491d520c673b3acfd5_cryptolocker
-
Size
38KB
-
Sample
240313-c2xk1aae8t
-
MD5
748bf2f427bc46491d520c673b3acfd5
-
SHA1
bf6ebcf17a9dc22aa75cd57ba508238d4289b0a7
-
SHA256
43befb4a072bdf9cdd93e6218d8d64ddc39e60adc408383d4cdc72f67e228f60
-
SHA512
7d4f9221dc8aec9ef60859c4172d426055363d7781b4bf0ca47335f68de93edec6dc05d2d801e82a3a78ddd36bd60f743b71cc7b5241ef91c8c426bd2bf87b62
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UTb:bAvJCYOOvbRPDEgXrNekd7l94i3py/Tb
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_748bf2f427bc46491d520c673b3acfd5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_748bf2f427bc46491d520c673b3acfd5_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_748bf2f427bc46491d520c673b3acfd5_cryptolocker
-
Size
38KB
-
MD5
748bf2f427bc46491d520c673b3acfd5
-
SHA1
bf6ebcf17a9dc22aa75cd57ba508238d4289b0a7
-
SHA256
43befb4a072bdf9cdd93e6218d8d64ddc39e60adc408383d4cdc72f67e228f60
-
SHA512
7d4f9221dc8aec9ef60859c4172d426055363d7781b4bf0ca47335f68de93edec6dc05d2d801e82a3a78ddd36bd60f743b71cc7b5241ef91c8c426bd2bf87b62
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UTb:bAvJCYOOvbRPDEgXrNekd7l94i3py/Tb
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-