Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-26_585aab84e070512bdaa73be1abc4fb4b_cryptolocker
-
Size
37KB
-
Sample
240426-nk839afe33
-
MD5
585aab84e070512bdaa73be1abc4fb4b
-
SHA1
f3664516cf041ebf46b765b327a220f2c4689c96
-
SHA256
159fc68d8dcd775b0d89d2af1cc94419b2a5d4fa2192b123a2edb6966f8dc6eb
-
SHA512
4cfb18fae7ef68b5f584dcba97bcc860539a552f23b248376c55bde0fd3f0128b2a7383cecce3fdeb967db864b18388c0a43a5aff2f5d2ad152dedd1ee0236bf
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mi:bc/y2lLRU6zA6qi
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_585aab84e070512bdaa73be1abc4fb4b_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-04-26_585aab84e070512bdaa73be1abc4fb4b_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-26_585aab84e070512bdaa73be1abc4fb4b_cryptolocker
-
Size
37KB
-
MD5
585aab84e070512bdaa73be1abc4fb4b
-
SHA1
f3664516cf041ebf46b765b327a220f2c4689c96
-
SHA256
159fc68d8dcd775b0d89d2af1cc94419b2a5d4fa2192b123a2edb6966f8dc6eb
-
SHA512
4cfb18fae7ef68b5f584dcba97bcc860539a552f23b248376c55bde0fd3f0128b2a7383cecce3fdeb967db864b18388c0a43a5aff2f5d2ad152dedd1ee0236bf
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36mi:bc/y2lLRU6zA6qi
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-