Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker
-
Size
89KB
-
Sample
240608-vhpp6ade7s
-
MD5
3f3309d9e475f74b14dff56ec5ae1e26
-
SHA1
be4e2b8d7b7fb74c416acd5555568e486878ca11
-
SHA256
d5c98ca05ea4dee307ab4c3fe06770b59931b84c47e13e37951094a62c38cdb4
-
SHA512
0a83abd04df97edbadea8593699a20bf55f58d6c345ba5e34a82156eaea8b153b51c9415efef95fb10339014d8dae548d1d2fd1335a150ee9d6ac1177d782c8b
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODk:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgG
Behavioral task
behavioral1
Sample
2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker
-
Size
89KB
-
MD5
3f3309d9e475f74b14dff56ec5ae1e26
-
SHA1
be4e2b8d7b7fb74c416acd5555568e486878ca11
-
SHA256
d5c98ca05ea4dee307ab4c3fe06770b59931b84c47e13e37951094a62c38cdb4
-
SHA512
0a83abd04df97edbadea8593699a20bf55f58d6c345ba5e34a82156eaea8b153b51c9415efef95fb10339014d8dae548d1d2fd1335a150ee9d6ac1177d782c8b
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODk:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgG
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-