Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-20_de745a42217582caaa7267f115bcf8a6_cryptolocker
-
Size
47KB
-
Sample
240620-e8ckhstdnn
-
MD5
de745a42217582caaa7267f115bcf8a6
-
SHA1
1e07ff3d3c16b4e67c529f83ded621196b5aee30
-
SHA256
928f83de46df937c6b26891af77b3fe88b351aab6f5c3580e3caf8f1dc8571d8
-
SHA512
b28f8415c347bf56f550ca345c4f1b508c027892d5cc10d5bf531d347784a066128470cd10a898461f6b6c6c72ffccc1c4803ebaaada6cc6db63a0f89e61d733
-
SSDEEP
768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrU:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz4
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_de745a42217582caaa7267f115bcf8a6_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-20_de745a42217582caaa7267f115bcf8a6_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-20_de745a42217582caaa7267f115bcf8a6_cryptolocker
-
Size
47KB
-
MD5
de745a42217582caaa7267f115bcf8a6
-
SHA1
1e07ff3d3c16b4e67c529f83ded621196b5aee30
-
SHA256
928f83de46df937c6b26891af77b3fe88b351aab6f5c3580e3caf8f1dc8571d8
-
SHA512
b28f8415c347bf56f550ca345c4f1b508c027892d5cc10d5bf531d347784a066128470cd10a898461f6b6c6c72ffccc1c4803ebaaada6cc6db63a0f89e61d733
-
SSDEEP
768:y6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjbXOQ69zbjlAAX5e9zrU:y6QFElP6n+gMQMOtEvwDpjbizbR9Xwz4
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-