Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-05-27_b40273a2eb01d1079ff857a27c1e339b_cryptolocker
-
Size
53KB
-
Sample
240527-vb93hsbg29
-
MD5
b40273a2eb01d1079ff857a27c1e339b
-
SHA1
fcaa16d747f145a69c4d8dd31834efc023505db5
-
SHA256
0c1733d73b024ffe307f52268cdd5d1aa19c0ade271afb980bf2e50a15d9f834
-
SHA512
6ce3a339fc93cb933eb6a7736f3365acffd4a485af250ed8f7055f20b9adfc7318a77f0c05c7eb679465c80585242c206f909703bf3188a1eab22453f9af1e47
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRkHD:6j+1NMOtEvwDpjr8hhXij
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-27_b40273a2eb01d1079ff857a27c1e339b_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-27_b40273a2eb01d1079ff857a27c1e339b_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-27_b40273a2eb01d1079ff857a27c1e339b_cryptolocker
-
Size
53KB
-
MD5
b40273a2eb01d1079ff857a27c1e339b
-
SHA1
fcaa16d747f145a69c4d8dd31834efc023505db5
-
SHA256
0c1733d73b024ffe307f52268cdd5d1aa19c0ade271afb980bf2e50a15d9f834
-
SHA512
6ce3a339fc93cb933eb6a7736f3365acffd4a485af250ed8f7055f20b9adfc7318a77f0c05c7eb679465c80585242c206f909703bf3188a1eab22453f9af1e47
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRkHD:6j+1NMOtEvwDpjr8hhXij
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-