Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker
-
Size
50KB
-
Sample
240326-w8zhqaca9s
-
MD5
ac7930d5fa6bc78b6923e6548ad4364b
-
SHA1
16fc41a2b535a40b67f2fa295615da35157abe73
-
SHA256
481a1c0d13c0b6f1edbb6d293310ac88f07211d8f47be9ddcb040f5455507b48
-
SHA512
4e39c9e909bc0e7a3c928c13b1e4fd1b9ad4c761f0351071ba7aff768c0fb7a94c2c3252efc28805e25db6a06b9e5537fd30db54f607e10829fa8baab0d216d3
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO5D:bgGYcA/53GAA6y37Q6dI+d5ID
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker
-
Size
50KB
-
MD5
ac7930d5fa6bc78b6923e6548ad4364b
-
SHA1
16fc41a2b535a40b67f2fa295615da35157abe73
-
SHA256
481a1c0d13c0b6f1edbb6d293310ac88f07211d8f47be9ddcb040f5455507b48
-
SHA512
4e39c9e909bc0e7a3c928c13b1e4fd1b9ad4c761f0351071ba7aff768c0fb7a94c2c3252efc28805e25db6a06b9e5537fd30db54f607e10829fa8baab0d216d3
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO5D:bgGYcA/53GAA6y37Q6dI+d5ID
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-