Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker
-
Size
46KB
-
Sample
240601-kbprgagb53
-
MD5
5d5008fe06603752e27c93cf7860d982
-
SHA1
34884431a600f265806ef8b23b7929f4227ebf9f
-
SHA256
f0fd4957cd45f766244bac22e0571c4cc155360ee2a476657c1bcb811df50043
-
SHA512
b3b344d42a9bcd1bead4e80093aee84ac11b3b16fa388c00c4aea203e4e93dce34d2c3a61d259eb345f8e33428c70ca80b919958f10b6e3e95fdce36072ded00
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqc:bc/y2lkF0+Beqc
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker
-
Size
46KB
-
MD5
5d5008fe06603752e27c93cf7860d982
-
SHA1
34884431a600f265806ef8b23b7929f4227ebf9f
-
SHA256
f0fd4957cd45f766244bac22e0571c4cc155360ee2a476657c1bcb811df50043
-
SHA512
b3b344d42a9bcd1bead4e80093aee84ac11b3b16fa388c00c4aea203e4e93dce34d2c3a61d259eb345f8e33428c70ca80b919958f10b6e3e95fdce36072ded00
-
SSDEEP
768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqc:bc/y2lkF0+Beqc
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-