Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker
-
Size
40KB
-
Sample
240409-tnvmxsfc7y
-
MD5
30158bcc4f0652945d4ad0270804bd70
-
SHA1
02c2178cef1815e7ceae75dba6fb3b9ed9cf0b9c
-
SHA256
71185f7e1ef8edb72fcbd6532fb9741c58a29df342ba4ccba98fdd4d2b571557
-
SHA512
93c8766c0a853da392d1e679a80c2de8eb2b30b72bdb055e5694b9cedda2682fac4e865ab324b5c9f61c482a31b4138545446b2765a6c9448e0044a0318d57a8
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsC:bAvJCYOOvbRPDEgXrNekd7l94i3py/yW
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker
-
Size
40KB
-
MD5
30158bcc4f0652945d4ad0270804bd70
-
SHA1
02c2178cef1815e7ceae75dba6fb3b9ed9cf0b9c
-
SHA256
71185f7e1ef8edb72fcbd6532fb9741c58a29df342ba4ccba98fdd4d2b571557
-
SHA512
93c8766c0a853da392d1e679a80c2de8eb2b30b72bdb055e5694b9cedda2682fac4e865ab324b5c9f61c482a31b4138545446b2765a6c9448e0044a0318d57a8
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsC:bAvJCYOOvbRPDEgXrNekd7l94i3py/yW
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-