Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker
-
Size
63KB
-
Sample
240327-gekedadh53
-
MD5
b19ab53c9eae891c0cf528dae6b86b5e
-
SHA1
5a513b2a84f4c19fd53d7089d3df67b03cc5132e
-
SHA256
690dbb9adfe55efaaa843807d58b3067f2f8da1ec331de00e2138e5182e6e96b
-
SHA512
8d308a9162d048f56788346bc7520cb14751c1778aac8204b0d8dc5e967095106c8a2e32cafd4f98aac2d6f4aaf647d113588554fc578d508bd372a9f9a8565e
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKI+:6j+1NMOtEvwDpjr8ox8UDEKF
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker
-
Size
63KB
-
MD5
b19ab53c9eae891c0cf528dae6b86b5e
-
SHA1
5a513b2a84f4c19fd53d7089d3df67b03cc5132e
-
SHA256
690dbb9adfe55efaaa843807d58b3067f2f8da1ec331de00e2138e5182e6e96b
-
SHA512
8d308a9162d048f56788346bc7520cb14751c1778aac8204b0d8dc5e967095106c8a2e32cafd4f98aac2d6f4aaf647d113588554fc578d508bd372a9f9a8565e
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKI+:6j+1NMOtEvwDpjr8ox8UDEKF
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-