Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-10_fe2d90fdeafa99abc27dd51a351c4d91_cryptolocker
-
Size
101KB
-
Sample
240410-xva4msgh98
-
MD5
fe2d90fdeafa99abc27dd51a351c4d91
-
SHA1
581291910e2ab4e83b1153bea6f0d0ece2e0b1fc
-
SHA256
bd75509af4baaf8cf48a1a705ab61dd59ddde8c1798a0b83ac41cd10409597af
-
SHA512
715a3c229242b380316d53a7dca5d846ef50b8516103121c5dde6b02cbed5e3396a19c346fcc388ad1e5e49edf5d2133f77324fac77a908dff943360534e1ab1
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2yO3xp:xj+VGMOtEvwDpjubwQEIiVmkxv/u8
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_fe2d90fdeafa99abc27dd51a351c4d91_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_fe2d90fdeafa99abc27dd51a351c4d91_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_fe2d90fdeafa99abc27dd51a351c4d91_cryptolocker
-
Size
101KB
-
MD5
fe2d90fdeafa99abc27dd51a351c4d91
-
SHA1
581291910e2ab4e83b1153bea6f0d0ece2e0b1fc
-
SHA256
bd75509af4baaf8cf48a1a705ab61dd59ddde8c1798a0b83ac41cd10409597af
-
SHA512
715a3c229242b380316d53a7dca5d846ef50b8516103121c5dde6b02cbed5e3396a19c346fcc388ad1e5e49edf5d2133f77324fac77a908dff943360534e1ab1
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2yO3xp:xj+VGMOtEvwDpjubwQEIiVmkxv/u8
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-