Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker
-
Size
50KB
-
Sample
240604-1cmlhach39
-
MD5
4e4486194b6178f8e0ff89a1ee070e69
-
SHA1
fe762551de8a2dfb346157803c9ff0a3c16c2dc3
-
SHA256
116252f981f1c3f25f39ef9c2225017dc1920ef95b45143915eca06fe6424c69
-
SHA512
b0b9c4ec9930e2fa7e96e9077441ecbdaf3dd7b268dc889a8ba258de0569018ea8f2cb380c521eacdffdf66a3b8bcc879e38f0144c4bfe5576b3e9939bb407e8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfb:X6QFElP6n+gJBMOtEvwDpjBtEdXfb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker
-
Size
50KB
-
MD5
4e4486194b6178f8e0ff89a1ee070e69
-
SHA1
fe762551de8a2dfb346157803c9ff0a3c16c2dc3
-
SHA256
116252f981f1c3f25f39ef9c2225017dc1920ef95b45143915eca06fe6424c69
-
SHA512
b0b9c4ec9930e2fa7e96e9077441ecbdaf3dd7b268dc889a8ba258de0569018ea8f2cb380c521eacdffdf66a3b8bcc879e38f0144c4bfe5576b3e9939bb407e8
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfb:X6QFElP6n+gJBMOtEvwDpjBtEdXfb
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-