Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-24_1cffaf83707e9c6aaa7faca986e2cc19_cryptolocker
-
Size
59KB
-
Sample
240524-btbswsgb6x
-
MD5
1cffaf83707e9c6aaa7faca986e2cc19
-
SHA1
1c5a3c7bd05c14e1af6c6f52cd7b008c6255cbb5
-
SHA256
5b13812e39af08f51b104ab40d901fe4c4bb6d95fd134e373cf3546ab5821b1a
-
SHA512
a804e97f0e68a16a062bfd6eaeebfb823457a765f2b5221990cd3d538b3e7e466a2f5c55f11008c6b71f70dd806a96c6ebca6a704211b6692f0c544e76a46081
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPB3I:H6QFElP6n+gou9cvMOtEvwDpjCpVXYY
Behavioral task
behavioral1
Sample
2024-05-24_1cffaf83707e9c6aaa7faca986e2cc19_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-24_1cffaf83707e9c6aaa7faca986e2cc19_cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
2024-05-24_1cffaf83707e9c6aaa7faca986e2cc19_cryptolocker
-
Size
59KB
-
MD5
1cffaf83707e9c6aaa7faca986e2cc19
-
SHA1
1c5a3c7bd05c14e1af6c6f52cd7b008c6255cbb5
-
SHA256
5b13812e39af08f51b104ab40d901fe4c4bb6d95fd134e373cf3546ab5821b1a
-
SHA512
a804e97f0e68a16a062bfd6eaeebfb823457a765f2b5221990cd3d538b3e7e466a2f5c55f11008c6b71f70dd806a96c6ebca6a704211b6692f0c544e76a46081
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPB3I:H6QFElP6n+gou9cvMOtEvwDpjCpVXYY
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-