Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker
-
Size
51KB
-
Sample
240422-v3dhmaea7t
-
MD5
20422797274e6488ec03aeb266029cb2
-
SHA1
0f94e1e3a68d1f583f624c21eb250d89407f1093
-
SHA256
fa3ec97c0f8cb40a1e2f96527482df1a1206a8927d7fed20922968648bbe9c03
-
SHA512
070a632f33c03c81684e6a7df140d64d2b5d0549c57e19fda30ed5c4b3d553574399cabe6a562785b4f6cc83e00f891db3142bbb978bbaf18b36f39e77aa2df3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTCFWpzgVoI:X6QFElP6n+gJBMOtEvwDpjBtELVd
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker
-
Size
51KB
-
MD5
20422797274e6488ec03aeb266029cb2
-
SHA1
0f94e1e3a68d1f583f624c21eb250d89407f1093
-
SHA256
fa3ec97c0f8cb40a1e2f96527482df1a1206a8927d7fed20922968648bbe9c03
-
SHA512
070a632f33c03c81684e6a7df140d64d2b5d0549c57e19fda30ed5c4b3d553574399cabe6a562785b4f6cc83e00f891db3142bbb978bbaf18b36f39e77aa2df3
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTCFWpzgVoI:X6QFElP6n+gJBMOtEvwDpjBtELVd
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-