Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-27_43ffa5280b9bf0b667dfa93dcb035474_cryptolocker
-
Size
61KB
-
Sample
240127-mjvzkacaen
-
MD5
43ffa5280b9bf0b667dfa93dcb035474
-
SHA1
efd008eb9d584d9542fb72a878c426d49b3815d8
-
SHA256
3159ab54c120073d5a79fac1e073a3ed6a04198663908f30e2268d7c77999421
-
SHA512
5f2fbfe5aba8a6687a2be4fbcbc37bf4e82d57e958d862fd5036c4b2b9e760d253863d8c2c4efae7bdaa994d54cebd1826da2eb48d1d8a161973f8df665e6c76
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEiN/:6j+1NMOtEvwDpjr8ox8UDEiN
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_43ffa5280b9bf0b667dfa93dcb035474_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-27_43ffa5280b9bf0b667dfa93dcb035474_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-27_43ffa5280b9bf0b667dfa93dcb035474_cryptolocker
-
Size
61KB
-
MD5
43ffa5280b9bf0b667dfa93dcb035474
-
SHA1
efd008eb9d584d9542fb72a878c426d49b3815d8
-
SHA256
3159ab54c120073d5a79fac1e073a3ed6a04198663908f30e2268d7c77999421
-
SHA512
5f2fbfe5aba8a6687a2be4fbcbc37bf4e82d57e958d862fd5036c4b2b9e760d253863d8c2c4efae7bdaa994d54cebd1826da2eb48d1d8a161973f8df665e6c76
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEiN/:6j+1NMOtEvwDpjr8ox8UDEiN
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-