Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-13_441121d74d9a56e1f7f6b6678e35edfc_cryptolocker
-
Size
41KB
-
Sample
240313-cys4eacc79
-
MD5
441121d74d9a56e1f7f6b6678e35edfc
-
SHA1
6d1dc03a924656194b19dd27b1004ac73441434e
-
SHA256
d364fef53f4220a8aa9bedca691d722c1d5cf96a5d462c52a64c1c90661deded
-
SHA512
5877da831df19b82042e22cbaa6993c440e53ee9180ae5efdba2c5aa8f8fde2fe612ade54418a9e20d0ea7c71406e7c16f08b1820ef37ec2d516e32099808587
-
SSDEEP
384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOC:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/k
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-13_441121d74d9a56e1f7f6b6678e35edfc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-13_441121d74d9a56e1f7f6b6678e35edfc_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-13_441121d74d9a56e1f7f6b6678e35edfc_cryptolocker
-
Size
41KB
-
MD5
441121d74d9a56e1f7f6b6678e35edfc
-
SHA1
6d1dc03a924656194b19dd27b1004ac73441434e
-
SHA256
d364fef53f4220a8aa9bedca691d722c1d5cf96a5d462c52a64c1c90661deded
-
SHA512
5877da831df19b82042e22cbaa6993c440e53ee9180ae5efdba2c5aa8f8fde2fe612ade54418a9e20d0ea7c71406e7c16f08b1820ef37ec2d516e32099808587
-
SSDEEP
384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOC:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/k
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-