Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-14_717c6a2396c292ed63b2bd0cd3e3b6c1_cryptolocker
-
Size
47KB
-
Sample
240214-n4v1qshf8s
-
MD5
717c6a2396c292ed63b2bd0cd3e3b6c1
-
SHA1
5fc5ebdd015ac6039d84b8c80cba98160f6ee77f
-
SHA256
d7b11c26e3400db3d74f9b62e5be6673a418999763a000c29f9b808dc9cebbc6
-
SHA512
39842bc1fd0f7c9b8712ea1b1577e65ab2e31e89e5c1c7bb3ac1e1350a10b63b387edc4fbfd359f862c75d944041991b5c64b0faa3e30eda591885b506327835
-
SSDEEP
384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7Ioqv3:XS5nQJ24LR1bytOOtEvwDpjNbP/Moqv3
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-14_717c6a2396c292ed63b2bd0cd3e3b6c1_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-14_717c6a2396c292ed63b2bd0cd3e3b6c1_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-14_717c6a2396c292ed63b2bd0cd3e3b6c1_cryptolocker
-
Size
47KB
-
MD5
717c6a2396c292ed63b2bd0cd3e3b6c1
-
SHA1
5fc5ebdd015ac6039d84b8c80cba98160f6ee77f
-
SHA256
d7b11c26e3400db3d74f9b62e5be6673a418999763a000c29f9b808dc9cebbc6
-
SHA512
39842bc1fd0f7c9b8712ea1b1577e65ab2e31e89e5c1c7bb3ac1e1350a10b63b387edc4fbfd359f862c75d944041991b5c64b0faa3e30eda591885b506327835
-
SSDEEP
384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7Ioqv3:XS5nQJ24LR1bytOOtEvwDpjNbP/Moqv3
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-