Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker
-
Size
40KB
-
Sample
240222-2krqvsga2x
-
MD5
ab6848fa8bd5eca065c94fadffe0701a
-
SHA1
fb20a0680a45bc584799e36e95912062d0535dbe
-
SHA256
ea6ee7df81ff4f1285d19a7a4be13a26d378a02898386f9b9c37be7f531216c3
-
SHA512
ccca35173336ffdd5f5b984ca478f949b635a01db190125a838aef9a2958fb7de13f5f3fb04b7e78e3fcc926b4ce88e0b21b03bae42e478376bd9eddd56bd02a
-
SSDEEP
768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFR1/:m5nkFNMOtEvwDpjG8hhX3/
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker
-
Size
40KB
-
MD5
ab6848fa8bd5eca065c94fadffe0701a
-
SHA1
fb20a0680a45bc584799e36e95912062d0535dbe
-
SHA256
ea6ee7df81ff4f1285d19a7a4be13a26d378a02898386f9b9c37be7f531216c3
-
SHA512
ccca35173336ffdd5f5b984ca478f949b635a01db190125a838aef9a2958fb7de13f5f3fb04b7e78e3fcc926b4ce88e0b21b03bae42e478376bd9eddd56bd02a
-
SSDEEP
768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFR1/:m5nkFNMOtEvwDpjG8hhX3/
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-