Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker
-
Size
63KB
-
Sample
240426-prgg9abg65
-
MD5
d3f52cead965409f08000e8b36455087
-
SHA1
ace4aa4b0e8e121dac271e8e5359fa4134caa1d8
-
SHA256
b93cf3625e9e64f7cc9832687728da6af4e2e70b9f3fcaece9f51d0d9f498852
-
SHA512
7a0c8746d49a521e12224c40394139309ae068b1a0fba675c82150fb9b65631a4ebcb811c5ee5c27c15869ab08dc47ed341a1be306b4e9aed0b2080817ee84b1
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X:aq7tdgI2MyzNORQtOflIwoHNV2XBFV71
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker
-
Size
63KB
-
MD5
d3f52cead965409f08000e8b36455087
-
SHA1
ace4aa4b0e8e121dac271e8e5359fa4134caa1d8
-
SHA256
b93cf3625e9e64f7cc9832687728da6af4e2e70b9f3fcaece9f51d0d9f498852
-
SHA512
7a0c8746d49a521e12224c40394139309ae068b1a0fba675c82150fb9b65631a4ebcb811c5ee5c27c15869ab08dc47ed341a1be306b4e9aed0b2080817ee84b1
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X:aq7tdgI2MyzNORQtOflIwoHNV2XBFV71
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-