Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-02_ca98158d805fb2a737c5aa2b3d9077bb_cryptolocker
-
Size
45KB
-
Sample
240602-q67teseb2v
-
MD5
ca98158d805fb2a737c5aa2b3d9077bb
-
SHA1
6937ab070b1f00c721a40665d14e792df059f5be
-
SHA256
00fe6a4c1308efc66b99ce60ddcc42906807b7b262d56e458d93db801be99051
-
SHA512
29eb0f9e351695c71517f17db1a2c767721e2c757381069b34b5cb1b930ee4e401ae1e999dfaff4639dd40f54761bf11133a535fb53551e5b2fc3ca42d800798
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9o:X6QFElP6n+gJQMOtEvwDpjBmzDkWDu
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-02_ca98158d805fb2a737c5aa2b3d9077bb_cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-06-02_ca98158d805fb2a737c5aa2b3d9077bb_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-02_ca98158d805fb2a737c5aa2b3d9077bb_cryptolocker
-
Size
45KB
-
MD5
ca98158d805fb2a737c5aa2b3d9077bb
-
SHA1
6937ab070b1f00c721a40665d14e792df059f5be
-
SHA256
00fe6a4c1308efc66b99ce60ddcc42906807b7b262d56e458d93db801be99051
-
SHA512
29eb0f9e351695c71517f17db1a2c767721e2c757381069b34b5cb1b930ee4e401ae1e999dfaff4639dd40f54761bf11133a535fb53551e5b2fc3ca42d800798
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9o:X6QFElP6n+gJQMOtEvwDpjBmzDkWDu
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-