Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-09_3e8ad8ef675de1909e3b39fb026a5aa5_cryptolocker
-
Size
47KB
-
Sample
240509-qnhftabf7w
-
MD5
3e8ad8ef675de1909e3b39fb026a5aa5
-
SHA1
e56f31363e2a80cbbc31b5c458e356ab70fde02a
-
SHA256
316ac4407ce6ae88b49cbf00d9add8631e6ffb5dfc55e01cac73e39a1008c4f3
-
SHA512
422bc3f0e0b41dd7a6475bc5268d5d6f02bfd3d675053c72f9c58b792db38537c19e9f34881afde6edf0be7f0ec906001f50104ddad48cbdbc210bcbf1ba6bea
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYsmt:xj+VGMOtEvwDpjy+viHsw
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-09_3e8ad8ef675de1909e3b39fb026a5aa5_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-09_3e8ad8ef675de1909e3b39fb026a5aa5_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-09_3e8ad8ef675de1909e3b39fb026a5aa5_cryptolocker
-
Size
47KB
-
MD5
3e8ad8ef675de1909e3b39fb026a5aa5
-
SHA1
e56f31363e2a80cbbc31b5c458e356ab70fde02a
-
SHA256
316ac4407ce6ae88b49cbf00d9add8631e6ffb5dfc55e01cac73e39a1008c4f3
-
SHA512
422bc3f0e0b41dd7a6475bc5268d5d6f02bfd3d675053c72f9c58b792db38537c19e9f34881afde6edf0be7f0ec906001f50104ddad48cbdbc210bcbf1ba6bea
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYsmt:xj+VGMOtEvwDpjy+viHsw
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-