Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-04-22_9f6bec46e7644a2560c7024a5c8c8f8d_cryptolocker
-
Size
146KB
-
Sample
240422-ybw3fafc33
-
MD5
9f6bec46e7644a2560c7024a5c8c8f8d
-
SHA1
8bc8fed970b8a40e1d9de42ec582cbe2e4c916bc
-
SHA256
636e2a6da35fdd649c1881da33168fc5360c3b423fbf4b881461203ca5c3ebb7
-
SHA512
8634fdb304b1c222d744ce89262d6bfc7c5b8b3b968568676bed2d50aab9c336ed8876a7cd82156f7b854aecf294eb13478d78e6185e415210e4ebce803229af
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNgp699GNtL1ed:T6a+rdOOtEvwDpjLzX
Behavioral task
behavioral1
Sample
2024-04-22_9f6bec46e7644a2560c7024a5c8c8f8d_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-22_9f6bec46e7644a2560c7024a5c8c8f8d_cryptolocker.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-22_9f6bec46e7644a2560c7024a5c8c8f8d_cryptolocker
-
Size
146KB
-
MD5
9f6bec46e7644a2560c7024a5c8c8f8d
-
SHA1
8bc8fed970b8a40e1d9de42ec582cbe2e4c916bc
-
SHA256
636e2a6da35fdd649c1881da33168fc5360c3b423fbf4b881461203ca5c3ebb7
-
SHA512
8634fdb304b1c222d744ce89262d6bfc7c5b8b3b968568676bed2d50aab9c336ed8876a7cd82156f7b854aecf294eb13478d78e6185e415210e4ebce803229af
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNgp699GNtL1ed:T6a+rdOOtEvwDpjLzX
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-