Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker
-
Size
49KB
-
Sample
240408-r64bnsbg76
-
MD5
a5f9718baff1bcbaff5405c28ac8d686
-
SHA1
4d4a7867fc2eab44c99b987902716b9a0db7b34d
-
SHA256
19e48c26d9243f90ec6b72462211509a5cf94bd32d7d6e0ea528a1b154fb1724
-
SHA512
bcdc2eb00fb31e969924ea51e0928de6eb90111a9189205682ca90b9bdfd6faafa8317f85835897febaca7fd926e6953db4bbc97e25b9e49d2f728252bf1fc8d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD98i:bgGYcA/53GAA6y37nby8i
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker
-
Size
49KB
-
MD5
a5f9718baff1bcbaff5405c28ac8d686
-
SHA1
4d4a7867fc2eab44c99b987902716b9a0db7b34d
-
SHA256
19e48c26d9243f90ec6b72462211509a5cf94bd32d7d6e0ea528a1b154fb1724
-
SHA512
bcdc2eb00fb31e969924ea51e0928de6eb90111a9189205682ca90b9bdfd6faafa8317f85835897febaca7fd926e6953db4bbc97e25b9e49d2f728252bf1fc8d
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD98i:bgGYcA/53GAA6y37nby8i
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-