Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-21_78059d945f9c9d4f6c0d3e3a8fc09fd5_cryptolocker
-
Size
54KB
-
Sample
240221-vaw49sbh43
-
MD5
78059d945f9c9d4f6c0d3e3a8fc09fd5
-
SHA1
c5afd4604de4f2f1111fce8f3b7fe1324e3eb9c1
-
SHA256
27ad2d13ca9d5948453e4ef9ff4dee05972162f1f8dca3796fc6dba3e74ad8e1
-
SHA512
9f675d8b1d36e4e89d5ffbe5ff51d1c1b4f1a99db551c6fcb6f39b4fdabf8a621ecb096180f6b73ec47a1095f2b5e9f883b285276902059220d4a47fd6080d04
-
SSDEEP
384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR57:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbKq
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-21_78059d945f9c9d4f6c0d3e3a8fc09fd5_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-21_78059d945f9c9d4f6c0d3e3a8fc09fd5_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-21_78059d945f9c9d4f6c0d3e3a8fc09fd5_cryptolocker
-
Size
54KB
-
MD5
78059d945f9c9d4f6c0d3e3a8fc09fd5
-
SHA1
c5afd4604de4f2f1111fce8f3b7fe1324e3eb9c1
-
SHA256
27ad2d13ca9d5948453e4ef9ff4dee05972162f1f8dca3796fc6dba3e74ad8e1
-
SHA512
9f675d8b1d36e4e89d5ffbe5ff51d1c1b4f1a99db551c6fcb6f39b4fdabf8a621ecb096180f6b73ec47a1095f2b5e9f883b285276902059220d4a47fd6080d04
-
SSDEEP
384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR57:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbKq
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-