Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker
-
Size
38KB
-
Sample
240406-fn7qlaca43
-
MD5
d04b0a4aa0ccc4e58ff177fe640d8970
-
SHA1
b2bff18cd5dd3e637f68dd29545145e348d258aa
-
SHA256
ec2443a6c52bae593591b1ca9686ee9a268747b2e3436f76b7024204bac1845c
-
SHA512
f51328aa00d1e2ab8c3508b368d6e86dd18771d683ce76414710bd8215a9b49787d79350f31df545e7b787276eaecde9d1c5a56b004106a5fc90d48a02963abb
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrB:vj+jsMQMOtEvwDpj5HcSY/B
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker
-
Size
38KB
-
MD5
d04b0a4aa0ccc4e58ff177fe640d8970
-
SHA1
b2bff18cd5dd3e637f68dd29545145e348d258aa
-
SHA256
ec2443a6c52bae593591b1ca9686ee9a268747b2e3436f76b7024204bac1845c
-
SHA512
f51328aa00d1e2ab8c3508b368d6e86dd18771d683ce76414710bd8215a9b49787d79350f31df545e7b787276eaecde9d1c5a56b004106a5fc90d48a02963abb
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrB:vj+jsMQMOtEvwDpj5HcSY/B
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-