Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker
-
Size
47KB
-
Sample
240430-c6v8qsac48
-
MD5
59d64db286da40c1ce13f203f5b1aa65
-
SHA1
f1428bb7c2f247357debb5a4c2929f673103ee39
-
SHA256
156eb933b0bfd53b673234b9ef1a5414422301922d82d35b748bae7a05e63834
-
SHA512
ae8ba2dc0a125183571a3a6c170160e503b6d970f67c40d122af89c721f54dee1e4740013f1caf14faffd1433c4fefe5dc1a84929ed6110036f96b1a397d7624
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker
-
Size
47KB
-
MD5
59d64db286da40c1ce13f203f5b1aa65
-
SHA1
f1428bb7c2f247357debb5a4c2929f673103ee39
-
SHA256
156eb933b0bfd53b673234b9ef1a5414422301922d82d35b748bae7a05e63834
-
SHA512
ae8ba2dc0a125183571a3a6c170160e503b6d970f67c40d122af89c721f54dee1e4740013f1caf14faffd1433c4fefe5dc1a84929ed6110036f96b1a397d7624
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-