Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-27_8c34f72af16a0df9c8957fe92fb9a6cd_cryptolocker
-
Size
43KB
-
Sample
240427-2jf8qsad7v
-
MD5
8c34f72af16a0df9c8957fe92fb9a6cd
-
SHA1
3892a805265a9195c1e03a20e7e0907337a0b8fa
-
SHA256
8d847ace4d99fd98e99f4078ca19583a2e083005c671694f5954b1dec3b02608
-
SHA512
ccaea228c34ec5e93b43a51c8fc48f21d420dba9bb1a59ea17f7918c744fb5c7290f736bf2ecf642c8264288189df9727e161870bdbfa7de1f91d69a933a6e2b
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqR:bc/y2lkF0+BeqR
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_8c34f72af16a0df9c8957fe92fb9a6cd_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-27_8c34f72af16a0df9c8957fe92fb9a6cd_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-27_8c34f72af16a0df9c8957fe92fb9a6cd_cryptolocker
-
Size
43KB
-
MD5
8c34f72af16a0df9c8957fe92fb9a6cd
-
SHA1
3892a805265a9195c1e03a20e7e0907337a0b8fa
-
SHA256
8d847ace4d99fd98e99f4078ca19583a2e083005c671694f5954b1dec3b02608
-
SHA512
ccaea228c34ec5e93b43a51c8fc48f21d420dba9bb1a59ea17f7918c744fb5c7290f736bf2ecf642c8264288189df9727e161870bdbfa7de1f91d69a933a6e2b
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqR:bc/y2lkF0+BeqR
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-