Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-10_de7a43d8a2476f680675235ec58d8b0a_cryptolocker
-
Size
42KB
-
Sample
240510-3fv36aga2t
-
MD5
de7a43d8a2476f680675235ec58d8b0a
-
SHA1
36bca03e79bd61f527f8834ff02fda131d497184
-
SHA256
14ff3d318c36c89873800055c34aefc2fd40c84879b99e5ac88782a7b7188698
-
SHA512
195446d1dcba561672a62513580cce54e224e50123f0c767d5fe6069937268f752471b1ba7279ba42d0b01fc6d1232e7ea9122863dc6c9d1475217aa344c24f2
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZrpKy:bxNrC7kYo1Fxf3s05rwxbFE
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_de7a43d8a2476f680675235ec58d8b0a_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-10_de7a43d8a2476f680675235ec58d8b0a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-10_de7a43d8a2476f680675235ec58d8b0a_cryptolocker
-
Size
42KB
-
MD5
de7a43d8a2476f680675235ec58d8b0a
-
SHA1
36bca03e79bd61f527f8834ff02fda131d497184
-
SHA256
14ff3d318c36c89873800055c34aefc2fd40c84879b99e5ac88782a7b7188698
-
SHA512
195446d1dcba561672a62513580cce54e224e50123f0c767d5fe6069937268f752471b1ba7279ba42d0b01fc6d1232e7ea9122863dc6c9d1475217aa344c24f2
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZrpKy:bxNrC7kYo1Fxf3s05rwxbFE
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-