Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-12_1e17f9ac73649c66987d37b32ab2e5dc_cryptolocker
-
Size
96KB
-
Sample
240512-w13keada87
-
MD5
1e17f9ac73649c66987d37b32ab2e5dc
-
SHA1
a8f609a61a2a6804bb27c47fe9344fdeab3e410c
-
SHA256
b752886ad1fdc32fc42834f66486aee9283800226d3c0d4c29f8618a4fd9a128
-
SHA512
c8ac93691333d387576571c82e4baf194d247016e737ab8dd9db0400a156b15e84b911b69c7a7bbc8c5fb59e47b7810788fecb5b6934928650e7e4ffbb563e3f
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYY:xj+VGMOtEvwDpjubwQEIiVmksY
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-12_1e17f9ac73649c66987d37b32ab2e5dc_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-12_1e17f9ac73649c66987d37b32ab2e5dc_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-12_1e17f9ac73649c66987d37b32ab2e5dc_cryptolocker
-
Size
96KB
-
MD5
1e17f9ac73649c66987d37b32ab2e5dc
-
SHA1
a8f609a61a2a6804bb27c47fe9344fdeab3e410c
-
SHA256
b752886ad1fdc32fc42834f66486aee9283800226d3c0d4c29f8618a4fd9a128
-
SHA512
c8ac93691333d387576571c82e4baf194d247016e737ab8dd9db0400a156b15e84b911b69c7a7bbc8c5fb59e47b7810788fecb5b6934928650e7e4ffbb563e3f
-
SSDEEP
768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYY:xj+VGMOtEvwDpjubwQEIiVmksY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-