Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-12_0e9c1b6c3f65725edc94a274e1cd3afc_cryptolocker
-
Size
71KB
-
Sample
240612-w2lchsyelq
-
MD5
0e9c1b6c3f65725edc94a274e1cd3afc
-
SHA1
5020ea0369d4464491edb5833768407c1d03c7b9
-
SHA256
ba71b32eb2a35e79b50a91c4e934421228161422fb56ada3fa132386e46aab56
-
SHA512
8735eacfbf448e73216eca600926b53a635e5d4ce09918dd2182c951fd26894aeef02999b091ed31739574ce4c12acb09ef446832a4fe89bcec7be818ced7ec4
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R3:vj+jsMQMOtEvwDpj5HZYTjipvF24/
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-12_0e9c1b6c3f65725edc94a274e1cd3afc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-12_0e9c1b6c3f65725edc94a274e1cd3afc_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-12_0e9c1b6c3f65725edc94a274e1cd3afc_cryptolocker
-
Size
71KB
-
MD5
0e9c1b6c3f65725edc94a274e1cd3afc
-
SHA1
5020ea0369d4464491edb5833768407c1d03c7b9
-
SHA256
ba71b32eb2a35e79b50a91c4e934421228161422fb56ada3fa132386e46aab56
-
SHA512
8735eacfbf448e73216eca600926b53a635e5d4ce09918dd2182c951fd26894aeef02999b091ed31739574ce4c12acb09ef446832a4fe89bcec7be818ced7ec4
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4ZPsED3VK2+ZtyOjgO4r9vFAg2rq2g1B/R3:vj+jsMQMOtEvwDpj5HZYTjipvF24/
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-