Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-05_cc8c307f727c2c4c6c50f9425e34fd3e_cryptolocker
-
Size
57KB
-
Sample
240405-3mbcbseh8y
-
MD5
cc8c307f727c2c4c6c50f9425e34fd3e
-
SHA1
02e37e10f5d45ecba24b601a7292cac5fdef0968
-
SHA256
6d302b319668e9a880cc8ebc35ce92b4204e643c24085f7b6b65e553f8202671
-
SHA512
f79c1b775f10aa7d0f4fe111f975b9f61e8724666092b1d9f7b4e9eb738ea53cdc7e2e5f4608f608f4015b3a46f3475894c50e67642492e5cdf0bae864e15d8a
-
SSDEEP
1536:X6QFElP6n+gJBMOtEvwDpjBtE1yILJ0V5V:X6a+BOtEvwDpjBOA
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-05_cc8c307f727c2c4c6c50f9425e34fd3e_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-05_cc8c307f727c2c4c6c50f9425e34fd3e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-05_cc8c307f727c2c4c6c50f9425e34fd3e_cryptolocker
-
Size
57KB
-
MD5
cc8c307f727c2c4c6c50f9425e34fd3e
-
SHA1
02e37e10f5d45ecba24b601a7292cac5fdef0968
-
SHA256
6d302b319668e9a880cc8ebc35ce92b4204e643c24085f7b6b65e553f8202671
-
SHA512
f79c1b775f10aa7d0f4fe111f975b9f61e8724666092b1d9f7b4e9eb738ea53cdc7e2e5f4608f608f4015b3a46f3475894c50e67642492e5cdf0bae864e15d8a
-
SSDEEP
1536:X6QFElP6n+gJBMOtEvwDpjBtE1yILJ0V5V:X6a+BOtEvwDpjBOA
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-