Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-12_a78ee8d527f1144eba244383eac9c574_cryptolocker
-
Size
45KB
-
Sample
240612-vs7cyswgnn
-
MD5
a78ee8d527f1144eba244383eac9c574
-
SHA1
930aaaf14130aa88cd94806f3deb19866b72514e
-
SHA256
5e3a4ba7d484db06afe0c9416a9a20c287081cf3eb34ad19a8c01bae4f1baf3c
-
SHA512
03eaabed6c6e51f07669e3869f7f70aaeb124e6de79af90dc647e409fc51cb11871e58ab035ca78c92e4e85d1cc7c1e23dabd98ad67adb0077741126d4399ab5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9R:X6QFElP6n+gJQMOtEvwDpjBmzDkWDb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-12_a78ee8d527f1144eba244383eac9c574_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-12_a78ee8d527f1144eba244383eac9c574_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-12_a78ee8d527f1144eba244383eac9c574_cryptolocker
-
Size
45KB
-
MD5
a78ee8d527f1144eba244383eac9c574
-
SHA1
930aaaf14130aa88cd94806f3deb19866b72514e
-
SHA256
5e3a4ba7d484db06afe0c9416a9a20c287081cf3eb34ad19a8c01bae4f1baf3c
-
SHA512
03eaabed6c6e51f07669e3869f7f70aaeb124e6de79af90dc647e409fc51cb11871e58ab035ca78c92e4e85d1cc7c1e23dabd98ad67adb0077741126d4399ab5
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFHuRcD9R:X6QFElP6n+gJQMOtEvwDpjBmzDkWDb
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-