Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-14_469da5abf8ca7db67c4f3777c5538c3f_cryptolocker
-
Size
43KB
-
Sample
240614-jgrmksthmp
-
MD5
469da5abf8ca7db67c4f3777c5538c3f
-
SHA1
9157fcf723e1f31633d5ffedb33408425ce3f80b
-
SHA256
c3a5563c4ff6455c30d2fb42b3de6420128266a760a1719415e28886c9e72d4b
-
SHA512
d7e836e7fdfdf0a3e41583f5c3bb1054aad618cfd9bf70a6efca29e8a14a57b5f9a94a9d5361e131c8d300101283adf34d3a1c5edb7a5bc1153a6400633c8059
-
SSDEEP
768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYsZnTl:i5nkFGMOtEvwDpjR+viHsH
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_469da5abf8ca7db67c4f3777c5538c3f_cryptolocker.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-14_469da5abf8ca7db67c4f3777c5538c3f_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-14_469da5abf8ca7db67c4f3777c5538c3f_cryptolocker
-
Size
43KB
-
MD5
469da5abf8ca7db67c4f3777c5538c3f
-
SHA1
9157fcf723e1f31633d5ffedb33408425ce3f80b
-
SHA256
c3a5563c4ff6455c30d2fb42b3de6420128266a760a1719415e28886c9e72d4b
-
SHA512
d7e836e7fdfdf0a3e41583f5c3bb1054aad618cfd9bf70a6efca29e8a14a57b5f9a94a9d5361e131c8d300101283adf34d3a1c5edb7a5bc1153a6400633c8059
-
SSDEEP
768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYsZnTl:i5nkFGMOtEvwDpjR+viHsH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-