Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-08_24f6f3546f45447a614e32d1b72dd239_cryptolocker
-
Size
55KB
-
Sample
240608-3dnajaaf86
-
MD5
24f6f3546f45447a614e32d1b72dd239
-
SHA1
2c5695eaf1bc425f0bf702f73ec32e2e7195dc87
-
SHA256
e7f5b9b582f9b330bcbadf060106d0d2289341f78a3237ec88f4be7eb8d2eaa6
-
SHA512
39c598cff7dfd1bbf617760487f3f9683e9fd84684cf6c91ddc8c851c3f7cc1abe0cec14943857bd67d8a023e573cf58ca4ded9df36b7fbcd60cd303f58f5bc9
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EX:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-08_24f6f3546f45447a614e32d1b72dd239_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-08_24f6f3546f45447a614e32d1b72dd239_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-08_24f6f3546f45447a614e32d1b72dd239_cryptolocker
-
Size
55KB
-
MD5
24f6f3546f45447a614e32d1b72dd239
-
SHA1
2c5695eaf1bc425f0bf702f73ec32e2e7195dc87
-
SHA256
e7f5b9b582f9b330bcbadf060106d0d2289341f78a3237ec88f4be7eb8d2eaa6
-
SHA512
39c598cff7dfd1bbf617760487f3f9683e9fd84684cf6c91ddc8c851c3f7cc1abe0cec14943857bd67d8a023e573cf58ca4ded9df36b7fbcd60cd303f58f5bc9
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6EX:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-