Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker
-
Size
95KB
-
Sample
240509-e79hvsdg89
-
MD5
656a799311e020d5dced52fb6ead31eb
-
SHA1
fdf38c211ab3c81d807e69dc01c780d907e2fcaf
-
SHA256
f60298d2a10155573de20f38cea6383a5f351fc22457cd4beca531be100dd497
-
SHA512
a86b6e30ddf343384b47e68cb46cc502fe2e00dc9ba4ffd013925a11b53a06fa03ceb1ae2c62dd2deb65f226199156749b078c8a69cd596486dc5d4808ff7e05
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgRF:V6a+pOtEvwDpjtzP
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker
-
Size
95KB
-
MD5
656a799311e020d5dced52fb6ead31eb
-
SHA1
fdf38c211ab3c81d807e69dc01c780d907e2fcaf
-
SHA256
f60298d2a10155573de20f38cea6383a5f351fc22457cd4beca531be100dd497
-
SHA512
a86b6e30ddf343384b47e68cb46cc502fe2e00dc9ba4ffd013925a11b53a06fa03ceb1ae2c62dd2deb65f226199156749b078c8a69cd596486dc5d4808ff7e05
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgRF:V6a+pOtEvwDpjtzP
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-