Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker
-
Size
41KB
-
Sample
240531-cw7h1sbh7v
-
MD5
0e7afbb0f0f5ac291c89a8b37b34ee5a
-
SHA1
53ccaac2a49e8b4259d4ddbfa7fcc65d98ab81be
-
SHA256
075946e6897a9c1a31e4caa7ff1c5f2b0c6fa3bd7ec50c167bc8d526deadda8d
-
SHA512
077068b4c6616b411e5b16a3bc91ccdfabb5f37140417c9fabcb06859c7cef84fdbb521cd4d73fd79175e319157bf850824bfd4a7d5f6ed04c58050fa925b4e4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95i:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFI
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker
-
Size
41KB
-
MD5
0e7afbb0f0f5ac291c89a8b37b34ee5a
-
SHA1
53ccaac2a49e8b4259d4ddbfa7fcc65d98ab81be
-
SHA256
075946e6897a9c1a31e4caa7ff1c5f2b0c6fa3bd7ec50c167bc8d526deadda8d
-
SHA512
077068b4c6616b411e5b16a3bc91ccdfabb5f37140417c9fabcb06859c7cef84fdbb521cd4d73fd79175e319157bf850824bfd4a7d5f6ed04c58050fa925b4e4
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95i:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFI
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-