Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-25_b538e24a1ae2ae7562024586b423e99b_cryptolocker
-
Size
61KB
-
Sample
240125-byn9sadch2
-
MD5
b538e24a1ae2ae7562024586b423e99b
-
SHA1
9aa1bcb27f40c440f0d7ee19d0321b50d2afd446
-
SHA256
7645904afee92f3eebf1859d0666e3574c376fe13b32cb714f88fd7d8ae18ba5
-
SHA512
8654b96a11eb15227f7831382f121d7e8965c9fafacd88d3df850be7708deba18c89b8b5e3e994855315f820db6d59bc0b82eb9d3cacc5497b5a655813c20ab9
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEM1:6j+1NMOtEvwDpjr8ox8UDEE
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_b538e24a1ae2ae7562024586b423e99b_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-25_b538e24a1ae2ae7562024586b423e99b_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-25_b538e24a1ae2ae7562024586b423e99b_cryptolocker
-
Size
61KB
-
MD5
b538e24a1ae2ae7562024586b423e99b
-
SHA1
9aa1bcb27f40c440f0d7ee19d0321b50d2afd446
-
SHA256
7645904afee92f3eebf1859d0666e3574c376fe13b32cb714f88fd7d8ae18ba5
-
SHA512
8654b96a11eb15227f7831382f121d7e8965c9fafacd88d3df850be7708deba18c89b8b5e3e994855315f820db6d59bc0b82eb9d3cacc5497b5a655813c20ab9
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEM1:6j+1NMOtEvwDpjr8ox8UDEE
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-