Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-14_1d058408c9a99bb081a612ad56f383b6_cryptolocker
-
Size
42KB
-
Sample
240614-x4q68awhmj
-
MD5
1d058408c9a99bb081a612ad56f383b6
-
SHA1
b2a76eca1f341a7a09b3d2b7ed5ff1deacb7e94b
-
SHA256
8f34f841be9629c65affb4618224497cd18a04d2a0d8265df7c0ccd9243ea81f
-
SHA512
02e8114872a16882e95720f698708f7b76729cb00a85c47cefbd71234283e0b9f8b01898318342b207cb9173d2c13ae0965f01854c94baba6d1c35bcfdbc658f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAg:bCDOw9aMDooc+vAg
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_1d058408c9a99bb081a612ad56f383b6_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-14_1d058408c9a99bb081a612ad56f383b6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-14_1d058408c9a99bb081a612ad56f383b6_cryptolocker
-
Size
42KB
-
MD5
1d058408c9a99bb081a612ad56f383b6
-
SHA1
b2a76eca1f341a7a09b3d2b7ed5ff1deacb7e94b
-
SHA256
8f34f841be9629c65affb4618224497cd18a04d2a0d8265df7c0ccd9243ea81f
-
SHA512
02e8114872a16882e95720f698708f7b76729cb00a85c47cefbd71234283e0b9f8b01898318342b207cb9173d2c13ae0965f01854c94baba6d1c35bcfdbc658f
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAg:bCDOw9aMDooc+vAg
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-