Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-28_7c692d44fdd0ada5f84366ea8d242215_cryptolocker
-
Size
47KB
-
Sample
240528-kr39ssda9w
-
MD5
7c692d44fdd0ada5f84366ea8d242215
-
SHA1
6f8650bb61fa0a00f5c0a46255da8c5f87ef44d3
-
SHA256
5c49c19a2738ffe430ee00bcadece77cba67ef215d738285b02f94b7754569e6
-
SHA512
8c7e34afc4253d083a00561e88bda8f57aecc054280bae8d7c08d1f436a231b8556b640c10fd2b5eef33f42162f51a867b332383e9d12c5aa084838b2abd1f77
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vs:79inqyNR/QtOOtEvwDpjBKccJVODvy31
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_7c692d44fdd0ada5f84366ea8d242215_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-28_7c692d44fdd0ada5f84366ea8d242215_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-28_7c692d44fdd0ada5f84366ea8d242215_cryptolocker
-
Size
47KB
-
MD5
7c692d44fdd0ada5f84366ea8d242215
-
SHA1
6f8650bb61fa0a00f5c0a46255da8c5f87ef44d3
-
SHA256
5c49c19a2738ffe430ee00bcadece77cba67ef215d738285b02f94b7754569e6
-
SHA512
8c7e34afc4253d083a00561e88bda8f57aecc054280bae8d7c08d1f436a231b8556b640c10fd2b5eef33f42162f51a867b332383e9d12c5aa084838b2abd1f77
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2Vs:79inqyNR/QtOOtEvwDpjBKccJVODvy31
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-