Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker
-
Size
37KB
-
Sample
240326-jlkd3adh97
-
MD5
28b0b4f834f539efd3bd3a5f6a088be7
-
SHA1
2e9a75203777ac77b13df69eb6306082f9c6c43a
-
SHA256
211cf57348f1ae9042783290767a8e868f61d6aaa1c563e25d751559a2eaa7fc
-
SHA512
72b1739a44334698717824e53e076b174b1b179329f51eda40b48054ce63cb2794ea130cb2fad02f679f545b10b6d737b482bb9c886581237612f3f3a7e27574
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpgv:X6QFElP6n+gJQMOtEvwDpjBmzDUpgv
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker
-
Size
37KB
-
MD5
28b0b4f834f539efd3bd3a5f6a088be7
-
SHA1
2e9a75203777ac77b13df69eb6306082f9c6c43a
-
SHA256
211cf57348f1ae9042783290767a8e868f61d6aaa1c563e25d751559a2eaa7fc
-
SHA512
72b1739a44334698717824e53e076b174b1b179329f51eda40b48054ce63cb2794ea130cb2fad02f679f545b10b6d737b482bb9c886581237612f3f3a7e27574
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpgv:X6QFElP6n+gJQMOtEvwDpjBmzDUpgv
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-