Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker
-
Size
42KB
-
Sample
240615-rsfcpatdrf
-
MD5
3710f1e0559162a1c9209f0d35b1ffa2
-
SHA1
ff3c2b11bb62bf626d9ce0ebca3bc4a7852894a4
-
SHA256
af62efee8373da9e273840da89bdba657f418525877e0d1a6daeef2643205e80
-
SHA512
4b4427f01f26f0e2aefa382bff53072fc68dff59390dfd636abdcbd9584b714b173c1140d4221169d6617809ecfec99cdd963411d8c9540fda17dc6ae8a99dc7
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1Tw:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLw
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker
-
Size
42KB
-
MD5
3710f1e0559162a1c9209f0d35b1ffa2
-
SHA1
ff3c2b11bb62bf626d9ce0ebca3bc4a7852894a4
-
SHA256
af62efee8373da9e273840da89bdba657f418525877e0d1a6daeef2643205e80
-
SHA512
4b4427f01f26f0e2aefa382bff53072fc68dff59390dfd636abdcbd9584b714b173c1140d4221169d6617809ecfec99cdd963411d8c9540fda17dc6ae8a99dc7
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1Tw:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-