Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker
-
Size
55KB
-
Sample
240328-lvzlfshh2v
-
MD5
a57b4335531fb7e975e74a9aac3b01b7
-
SHA1
8b8ddf0a8c24715a497fd5281fe5adac29fb77e1
-
SHA256
f513b3c0534e13857172298aa946b4d4c702a6687ae136123949aa7b5be3c3bd
-
SHA512
e306a4bebe8f09c2c2f707a577f0e8eb412b55625587fc0fb903392e5379d17261b02ec9c48631b8a6137a1c38b1ec0900dd8a4a8e051b97099833f89bbf3e8f
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CdMduYJ:79mqyNhQMOtEvwDpjBPY7xv3g8ZdtJ
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker
-
Size
55KB
-
MD5
a57b4335531fb7e975e74a9aac3b01b7
-
SHA1
8b8ddf0a8c24715a497fd5281fe5adac29fb77e1
-
SHA256
f513b3c0534e13857172298aa946b4d4c702a6687ae136123949aa7b5be3c3bd
-
SHA512
e306a4bebe8f09c2c2f707a577f0e8eb412b55625587fc0fb903392e5379d17261b02ec9c48631b8a6137a1c38b1ec0900dd8a4a8e051b97099833f89bbf3e8f
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CdMduYJ:79mqyNhQMOtEvwDpjBPY7xv3g8ZdtJ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-