Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-28_066ecb3cfc9b34f38c48a69c7c174dab_cryptolocker
-
Size
42KB
-
Sample
240428-apf2dabg99
-
MD5
066ecb3cfc9b34f38c48a69c7c174dab
-
SHA1
6bcfdd6080c4806ae798ab15c7187f34abd83fd3
-
SHA256
81731f3081068517bfa106cf905026c096c4654f1f4a857ec645f3e33337e8c3
-
SHA512
46a7f7fda975717d770eb1583dc87672fa2b91ea922d088f21146ecf28341e0fd23dfd9148039190a64290fa76a4473bf7699df488e490ef3e095419113fd694
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHS:bCDOw9aMDooc+vAy
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_066ecb3cfc9b34f38c48a69c7c174dab_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-28_066ecb3cfc9b34f38c48a69c7c174dab_cryptolocker.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-28_066ecb3cfc9b34f38c48a69c7c174dab_cryptolocker
-
Size
42KB
-
MD5
066ecb3cfc9b34f38c48a69c7c174dab
-
SHA1
6bcfdd6080c4806ae798ab15c7187f34abd83fd3
-
SHA256
81731f3081068517bfa106cf905026c096c4654f1f4a857ec645f3e33337e8c3
-
SHA512
46a7f7fda975717d770eb1583dc87672fa2b91ea922d088f21146ecf28341e0fd23dfd9148039190a64290fa76a4473bf7699df488e490ef3e095419113fd694
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAHS:bCDOw9aMDooc+vAy
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-