Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-10_dd2f4041e20ff87da830960a71fdcde2_cryptolocker
-
Size
41KB
-
Sample
240510-w5952sbb8z
-
MD5
dd2f4041e20ff87da830960a71fdcde2
-
SHA1
b24b6bdeb30b5ba4e64dd37784931e87c2df03e0
-
SHA256
5b9bf18a205f802f6bd40f65588b695dc733cbd6d42d164d48d2f895e2e8f396
-
SHA512
e4f7a881089a81cc53ca6fd239ab363bf55029186ee9846b88e52079f4a7fea106e76972dab0850ad0396749d94e1b02c4169036580fbd3310741cce84e29642
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCL:X6QFElP6n+gJQMOtEvwDpjBsYK/fw
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-10_dd2f4041e20ff87da830960a71fdcde2_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-10_dd2f4041e20ff87da830960a71fdcde2_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-10_dd2f4041e20ff87da830960a71fdcde2_cryptolocker
-
Size
41KB
-
MD5
dd2f4041e20ff87da830960a71fdcde2
-
SHA1
b24b6bdeb30b5ba4e64dd37784931e87c2df03e0
-
SHA256
5b9bf18a205f802f6bd40f65588b695dc733cbd6d42d164d48d2f895e2e8f396
-
SHA512
e4f7a881089a81cc53ca6fd239ab363bf55029186ee9846b88e52079f4a7fea106e76972dab0850ad0396749d94e1b02c4169036580fbd3310741cce84e29642
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCL:X6QFElP6n+gJQMOtEvwDpjBsYK/fw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-