Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker
-
Size
41KB
-
Sample
240320-dbq6zafb35
-
MD5
6851b45daff176ba2850c18efee0eae9
-
SHA1
9c1686518d32c3021fced769b8932f0bc1267527
-
SHA256
754d556b2751ec2c96159ca3e52539a9b2a01af8cd2e9767ef8358b1f0d0ce19
-
SHA512
580f050d14c4dbd050dff9031d188cddbfb010ac1b733425a40ff215eec03d0ac13bf9582ebdb5cac64c2f97890021bd32d7f2d84cf3285fa799516b7b2dc46a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/BJp:6j+1NMOtEvwDpjrR5
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker
-
Size
41KB
-
MD5
6851b45daff176ba2850c18efee0eae9
-
SHA1
9c1686518d32c3021fced769b8932f0bc1267527
-
SHA256
754d556b2751ec2c96159ca3e52539a9b2a01af8cd2e9767ef8358b1f0d0ce19
-
SHA512
580f050d14c4dbd050dff9031d188cddbfb010ac1b733425a40ff215eec03d0ac13bf9582ebdb5cac64c2f97890021bd32d7f2d84cf3285fa799516b7b2dc46a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/BJp:6j+1NMOtEvwDpjrR5
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-