Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-31_fb13e8ba9470c8b465a08fb52f8e5dbf_cryptolocker
-
Size
68KB
-
Sample
240531-dtalyaed64
-
MD5
fb13e8ba9470c8b465a08fb52f8e5dbf
-
SHA1
e55bcfc0e66f22ad7c6351b991ab7761603135e0
-
SHA256
a6f3a07018e6fc17a08dded59c71cd882bc44d5663ef86a77ddc7040e8425d52
-
SHA512
a0dea9db9bb99058fb4af13722b977a42df92c4dfebcd48a61b0777ebd0448e32d08ab8703cc36cf54d6ccd23f1055c15a9106c2d3d6903347137d775f2fae3f
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE+:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7G
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_fb13e8ba9470c8b465a08fb52f8e5dbf_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-31_fb13e8ba9470c8b465a08fb52f8e5dbf_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-31_fb13e8ba9470c8b465a08fb52f8e5dbf_cryptolocker
-
Size
68KB
-
MD5
fb13e8ba9470c8b465a08fb52f8e5dbf
-
SHA1
e55bcfc0e66f22ad7c6351b991ab7761603135e0
-
SHA256
a6f3a07018e6fc17a08dded59c71cd882bc44d5663ef86a77ddc7040e8425d52
-
SHA512
a0dea9db9bb99058fb4af13722b977a42df92c4dfebcd48a61b0777ebd0448e32d08ab8703cc36cf54d6ccd23f1055c15a9106c2d3d6903347137d775f2fae3f
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLE+:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7G
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-