Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-20_16abdc75a8c1331da3d1921cd30adbed_cryptolocker
-
Size
62KB
-
Sample
240620-f2r73avhpm
-
MD5
16abdc75a8c1331da3d1921cd30adbed
-
SHA1
cb1ac202da70089b51dc3d28262594dc3234af3f
-
SHA256
2e2f2d26a8be46e2f1d0047e9dd12247ccd40c0b5d0f9e208cfa28af4c88d225
-
SHA512
0ac7e3becd52205f67e6f6c2551261df98debd361ae33a905d404ab90499f8d4c70325bef5b961661ea194f79136a1a4b8badd542631c856978999e49795f7a8
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9B:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWY
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_16abdc75a8c1331da3d1921cd30adbed_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-20_16abdc75a8c1331da3d1921cd30adbed_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-20_16abdc75a8c1331da3d1921cd30adbed_cryptolocker
-
Size
62KB
-
MD5
16abdc75a8c1331da3d1921cd30adbed
-
SHA1
cb1ac202da70089b51dc3d28262594dc3234af3f
-
SHA256
2e2f2d26a8be46e2f1d0047e9dd12247ccd40c0b5d0f9e208cfa28af4c88d225
-
SHA512
0ac7e3becd52205f67e6f6c2551261df98debd361ae33a905d404ab90499f8d4c70325bef5b961661ea194f79136a1a4b8badd542631c856978999e49795f7a8
-
SSDEEP
768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9B:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-