Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-28_cea9f77b191407d33f04e64ac72dadd4_cryptolocker
-
Size
61KB
-
Sample
240428-fgqthagg2v
-
MD5
cea9f77b191407d33f04e64ac72dadd4
-
SHA1
743c993fdad9b518329dd46c562dd671babbff32
-
SHA256
f39a8de5977fa0ce317e72f84102b7186a6bd46c1b00d6e90d8cf93d375457f2
-
SHA512
27a8a5dda8fd2feb7c90ca644c1e6fc2c6a966bda82d6ab740a0a3e0767ebc2a976c9e5044d4397024f0fb0a250bd9984265d66f06540a9df0b7e0518599c377
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJT/Equ:ZVxkGOtEvwDpjcOY
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-28_cea9f77b191407d33f04e64ac72dadd4_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-28_cea9f77b191407d33f04e64ac72dadd4_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-28_cea9f77b191407d33f04e64ac72dadd4_cryptolocker
-
Size
61KB
-
MD5
cea9f77b191407d33f04e64ac72dadd4
-
SHA1
743c993fdad9b518329dd46c562dd671babbff32
-
SHA256
f39a8de5977fa0ce317e72f84102b7186a6bd46c1b00d6e90d8cf93d375457f2
-
SHA512
27a8a5dda8fd2feb7c90ca644c1e6fc2c6a966bda82d6ab740a0a3e0767ebc2a976c9e5044d4397024f0fb0a250bd9984265d66f06540a9df0b7e0518599c377
-
SSDEEP
1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJT/Equ:ZVxkGOtEvwDpjcOY
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-