Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-27_4cf099194ac1ab513a10ab1946b78595_cryptolocker
-
Size
85KB
-
Sample
240327-d8vwesbh65
-
MD5
4cf099194ac1ab513a10ab1946b78595
-
SHA1
928634ad1ce7c559d3e07236cdb2a7ff20880260
-
SHA256
d6132e4eb467a78a6d8c7a9b44c892a153f829ffadcd424dd4ca9fbe7e7b8fff
-
SHA512
69f0d994fdab7de0e263a269249ec7f50fa533033b77cf2a8c084f75ac2ce62da3a039981e5be4e5da20e266607f6baddd2ccacd3c924975a5af9c7b2166b5e3
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgj7:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg9
Behavioral task
behavioral1
Sample
2024-03-27_4cf099194ac1ab513a10ab1946b78595_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_4cf099194ac1ab513a10ab1946b78595_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_4cf099194ac1ab513a10ab1946b78595_cryptolocker
-
Size
85KB
-
MD5
4cf099194ac1ab513a10ab1946b78595
-
SHA1
928634ad1ce7c559d3e07236cdb2a7ff20880260
-
SHA256
d6132e4eb467a78a6d8c7a9b44c892a153f829ffadcd424dd4ca9fbe7e7b8fff
-
SHA512
69f0d994fdab7de0e263a269249ec7f50fa533033b77cf2a8c084f75ac2ce62da3a039981e5be4e5da20e266607f6baddd2ccacd3c924975a5af9c7b2166b5e3
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIgj7:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg9
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-