Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-16_8a4646a8b0da449de75206b2c79141da_cryptolocker
-
Size
31KB
-
Sample
240416-fk77ysbg9x
-
MD5
8a4646a8b0da449de75206b2c79141da
-
SHA1
6f404c317c7f28858b5585885186b83a48c4a4ea
-
SHA256
f136d448d9294c8a41a653652f044a85ee4d6a188623445d0783367a0495d6c6
-
SHA512
d045794b3ff17046e77628743daa2362eedf34d1493cdb6d9eec6daa3c06c38f3211dd0d95e9c522623c35a9a84cc39aee4afd3233622f4a9e7d4dadaeccc496
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGH:bG74zYcgT/Ekd0ryfjC
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_8a4646a8b0da449de75206b2c79141da_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-16_8a4646a8b0da449de75206b2c79141da_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-16_8a4646a8b0da449de75206b2c79141da_cryptolocker
-
Size
31KB
-
MD5
8a4646a8b0da449de75206b2c79141da
-
SHA1
6f404c317c7f28858b5585885186b83a48c4a4ea
-
SHA256
f136d448d9294c8a41a653652f044a85ee4d6a188623445d0783367a0495d6c6
-
SHA512
d045794b3ff17046e77628743daa2362eedf34d1493cdb6d9eec6daa3c06c38f3211dd0d95e9c522623c35a9a84cc39aee4afd3233622f4a9e7d4dadaeccc496
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGH:bG74zYcgT/Ekd0ryfjC
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-