Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker
-
Size
51KB
-
Sample
240415-zelljshh4y
-
MD5
fdeaa196bae5a951e20ecfff1dff17bd
-
SHA1
fc81e87af664b6aefd6316e7a5f2aac662747ea4
-
SHA256
a288ab016984d6638bd53effd1000a843b634c873c3095d45ec12b79a5c16b5f
-
SHA512
dc8d809211e76c3faec73e6cd8b95c1a1a11d8141ad0557ea595b755a88a0268524bf9919cf2986f48fff20697ffb6bff946f1554b97f690b53ccb8076b98d56
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gju:bgGYcA/53GAA6y37Q6dI+d5QGi
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker
-
Size
51KB
-
MD5
fdeaa196bae5a951e20ecfff1dff17bd
-
SHA1
fc81e87af664b6aefd6316e7a5f2aac662747ea4
-
SHA256
a288ab016984d6638bd53effd1000a843b634c873c3095d45ec12b79a5c16b5f
-
SHA512
dc8d809211e76c3faec73e6cd8b95c1a1a11d8141ad0557ea595b755a88a0268524bf9919cf2986f48fff20697ffb6bff946f1554b97f690b53ccb8076b98d56
-
SSDEEP
768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gju:bgGYcA/53GAA6y37Q6dI+d5QGi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-