Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-18_fb88ec790020af0ded1271362216c574_cryptolocker
-
Size
92KB
-
Sample
240118-3lrypaggek
-
MD5
fb88ec790020af0ded1271362216c574
-
SHA1
2f3a1aa5919dff2aac0b3fb7083ad7b11e93bb2b
-
SHA256
3704f84a27f8b80bdb1b2519802f75948b0282e13d8e67a6a8f9fb4d34c9a6d5
-
SHA512
f2036d63caf28c78fcad5b1f75bd3d53a10c908f7c67b96d7e47d639a793f355b8f684026db6d07db526032703cdb9197a21908c200c67678d3284789f732d40
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01r:AnBdOOtEvwDpj6zZ
Behavioral task
behavioral1
Sample
2024-01-18_fb88ec790020af0ded1271362216c574_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-18_fb88ec790020af0ded1271362216c574_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-18_fb88ec790020af0ded1271362216c574_cryptolocker
-
Size
92KB
-
MD5
fb88ec790020af0ded1271362216c574
-
SHA1
2f3a1aa5919dff2aac0b3fb7083ad7b11e93bb2b
-
SHA256
3704f84a27f8b80bdb1b2519802f75948b0282e13d8e67a6a8f9fb4d34c9a6d5
-
SHA512
f2036d63caf28c78fcad5b1f75bd3d53a10c908f7c67b96d7e47d639a793f355b8f684026db6d07db526032703cdb9197a21908c200c67678d3284789f732d40
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp01r:AnBdOOtEvwDpj6zZ
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-