Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-14_67424bceec7caf2d739a343b5680c09f_cryptolocker
-
Size
53KB
-
Sample
240514-efj4wshg5z
-
MD5
67424bceec7caf2d739a343b5680c09f
-
SHA1
2b613678cfd70e1c4749d6b2bb9fe30fbaa4c4a3
-
SHA256
179056afa5d93cd4b52571de0e9b96b798c5b4d91f40e812bf9350478b4c5af1
-
SHA512
10032ed55ac911f5b04c055f869478c1f57cfc23c4fe38ff4f6568792efeb2959329db28d2876af4cc2f20937e72700f8bb5d3a05a8742faae4da6d7fed6b429
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIK:X6QFElP6n+gJBMOtEvwDpjBtExml9
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_67424bceec7caf2d739a343b5680c09f_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-14_67424bceec7caf2d739a343b5680c09f_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-14_67424bceec7caf2d739a343b5680c09f_cryptolocker
-
Size
53KB
-
MD5
67424bceec7caf2d739a343b5680c09f
-
SHA1
2b613678cfd70e1c4749d6b2bb9fe30fbaa4c4a3
-
SHA256
179056afa5d93cd4b52571de0e9b96b798c5b4d91f40e812bf9350478b4c5af1
-
SHA512
10032ed55ac911f5b04c055f869478c1f57cfc23c4fe38ff4f6568792efeb2959329db28d2876af4cc2f20937e72700f8bb5d3a05a8742faae4da6d7fed6b429
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIK:X6QFElP6n+gJBMOtEvwDpjBtExml9
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-