Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-15_209b99efd6a83c05fe7df85743fdb7b9_cryptolocker
-
Size
43KB
-
Sample
240515-e43wxahd86
-
MD5
209b99efd6a83c05fe7df85743fdb7b9
-
SHA1
480dfc12c262829b002e7ca03310a6daee90531c
-
SHA256
5b33d280053eb47e0fbed728f425667cca2a6fd16656c336a1575d51010c3311
-
SHA512
6f387326f6b5afe1a3972f8c71678d32e57c39e65162973632b77ef70ca8e542613f5e61d61803587b90038f91a5e2be23bdadb542c19d4b7a3ab6e759df829a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabMwj:6j+1NMOtEvwDpjrR2XabMwj
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_209b99efd6a83c05fe7df85743fdb7b9_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-15_209b99efd6a83c05fe7df85743fdb7b9_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-15_209b99efd6a83c05fe7df85743fdb7b9_cryptolocker
-
Size
43KB
-
MD5
209b99efd6a83c05fe7df85743fdb7b9
-
SHA1
480dfc12c262829b002e7ca03310a6daee90531c
-
SHA256
5b33d280053eb47e0fbed728f425667cca2a6fd16656c336a1575d51010c3311
-
SHA512
6f387326f6b5afe1a3972f8c71678d32e57c39e65162973632b77ef70ca8e542613f5e61d61803587b90038f91a5e2be23bdadb542c19d4b7a3ab6e759df829a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabMwj:6j+1NMOtEvwDpjrR2XabMwj
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-