Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-17_c42e93120bc9bdfbb5d9aed4f7554337_cryptolocker
-
Size
30KB
-
Sample
240417-hbpqcshe8y
-
MD5
c42e93120bc9bdfbb5d9aed4f7554337
-
SHA1
3c9f63470779fb0b751c867d5712ae4e05e3e639
-
SHA256
6739712535da91a34b2b74051456aca7b8a4fae49fb0d470929c33ea3956a807
-
SHA512
6af31ab0d1bb3a8beaa376f9c5cfc0ea3f8e2687f5822a919b3424b7d4ffd14cfc6c4dea03f509d26b6056d88bfe82521630e1a63d1f0de285625e9e13057fc2
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGf:bG74zYcgT/Ekd0ryfjS
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_c42e93120bc9bdfbb5d9aed4f7554337_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-17_c42e93120bc9bdfbb5d9aed4f7554337_cryptolocker.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-17_c42e93120bc9bdfbb5d9aed4f7554337_cryptolocker
-
Size
30KB
-
MD5
c42e93120bc9bdfbb5d9aed4f7554337
-
SHA1
3c9f63470779fb0b751c867d5712ae4e05e3e639
-
SHA256
6739712535da91a34b2b74051456aca7b8a4fae49fb0d470929c33ea3956a807
-
SHA512
6af31ab0d1bb3a8beaa376f9c5cfc0ea3f8e2687f5822a919b3424b7d4ffd14cfc6c4dea03f509d26b6056d88bfe82521630e1a63d1f0de285625e9e13057fc2
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGf:bG74zYcgT/Ekd0ryfjS
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-