Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-10_41cf98cbdcf2a73b1f765dd57e66a870_cryptolocker
-
Size
41KB
-
Sample
240410-3glwwahc81
-
MD5
41cf98cbdcf2a73b1f765dd57e66a870
-
SHA1
accad0ba9608d566caf20d4dc87d8f8b624e95c4
-
SHA256
d0f12346d5d1fbef9fefb97bc8671dd63f0fce2f97cb92402bb8ddec505e5dc7
-
SHA512
88e81d1187951563bafbbb5f18858ed28f5eb1236c02f55a5bc16b1ed06cf3b38e167926d93457e800827aa99bd9ab19754c304b17fca546992bda6f3111e8a5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW1Rm:bgGYcA/53GADw8C3q8
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_41cf98cbdcf2a73b1f765dd57e66a870_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-10_41cf98cbdcf2a73b1f765dd57e66a870_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_41cf98cbdcf2a73b1f765dd57e66a870_cryptolocker
-
Size
41KB
-
MD5
41cf98cbdcf2a73b1f765dd57e66a870
-
SHA1
accad0ba9608d566caf20d4dc87d8f8b624e95c4
-
SHA256
d0f12346d5d1fbef9fefb97bc8671dd63f0fce2f97cb92402bb8ddec505e5dc7
-
SHA512
88e81d1187951563bafbbb5f18858ed28f5eb1236c02f55a5bc16b1ed06cf3b38e167926d93457e800827aa99bd9ab19754c304b17fca546992bda6f3111e8a5
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDDw3sCu5mXW1Rm:bgGYcA/53GADw8C3q8
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-