Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-28_3af4a4564ee3570e72a71ebcb5246730_cryptolocker
-
Size
42KB
-
Sample
240528-3dtgjsgf8v
-
MD5
3af4a4564ee3570e72a71ebcb5246730
-
SHA1
97d720d23c38e80408966fd6d933c527f91b5d56
-
SHA256
5b7f7e319d8eb4ba08e140aa63f9c2bfcdbc0484e4281565f513a24c7e5e6a95
-
SHA512
3821c66fc4e0f48a066e558e4cdd64bf96316b00db3197a474b091798693d50aa7856f8f07648785b150679bdd4727243aec0d6d2c0a2fec971caabc98de4913
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwx:bA6YcA/X6G0W143Qx
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_3af4a4564ee3570e72a71ebcb5246730_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-28_3af4a4564ee3570e72a71ebcb5246730_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-28_3af4a4564ee3570e72a71ebcb5246730_cryptolocker
-
Size
42KB
-
MD5
3af4a4564ee3570e72a71ebcb5246730
-
SHA1
97d720d23c38e80408966fd6d933c527f91b5d56
-
SHA256
5b7f7e319d8eb4ba08e140aa63f9c2bfcdbc0484e4281565f513a24c7e5e6a95
-
SHA512
3821c66fc4e0f48a066e558e4cdd64bf96316b00db3197a474b091798693d50aa7856f8f07648785b150679bdd4727243aec0d6d2c0a2fec971caabc98de4913
-
SSDEEP
768:bA74zYcgT/Ekd0ryfjPIunqpeNswmT3Hwx:bA6YcA/X6G0W143Qx
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-