Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-09_f04a84c03a201bb5e3c5c6a039e4f3c5_cryptolocker
-
Size
50KB
-
Sample
240609-dvebhsdf26
-
MD5
f04a84c03a201bb5e3c5c6a039e4f3c5
-
SHA1
bf786d5826775bc966e98933b313ce9c99b0ce0d
-
SHA256
15d799f4d08ad4ea32db3a9342d6cd2479dc7102ce6eebe2213906af2e4246fc
-
SHA512
e4bd22e7d505e2db9969264972ed8b7fe1d21589a126314d58bee9e88770edfe2e45bf84ffa63f56bea53573a0d201f20b1669c21bc22aa5a29644c4508e0486
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfj:X6QFElP6n+gJBMOtEvwDpjBtEdXfj
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-09_f04a84c03a201bb5e3c5c6a039e4f3c5_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-06-09_f04a84c03a201bb5e3c5c6a039e4f3c5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-06-09_f04a84c03a201bb5e3c5c6a039e4f3c5_cryptolocker
-
Size
50KB
-
MD5
f04a84c03a201bb5e3c5c6a039e4f3c5
-
SHA1
bf786d5826775bc966e98933b313ce9c99b0ce0d
-
SHA256
15d799f4d08ad4ea32db3a9342d6cd2479dc7102ce6eebe2213906af2e4246fc
-
SHA512
e4bd22e7d505e2db9969264972ed8b7fe1d21589a126314d58bee9e88770edfe2e45bf84ffa63f56bea53573a0d201f20b1669c21bc22aa5a29644c4508e0486
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfj:X6QFElP6n+gJBMOtEvwDpjBtEdXfj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-