Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.2023-09-06_393311f76f83cd894c7038e61f214f7b_cryptolocker_JC.exe
-
Size
39KB
-
Sample
231022-lazqqagh34
-
MD5
393311f76f83cd894c7038e61f214f7b
-
SHA1
c4b7e3cff7e8fa982fbb3721cefced16c2b59265
-
SHA256
44ef1ca6a81f096fa49f225c3ecf04b99a0e1949a28850cc2607acfd8d44a448
-
SHA512
3c21abcbfb6cca337ebddf7ce64ddf052813fe9f415a6181f077f4e6a95a2ed8e52c547be54f74ffd28a8db8c3de5f488f345d3efd63e6a17f0c46e8082ffcca
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwV:bc/y2lm6Y0AqJ51mwV
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-06_393311f76f83cd894c7038e61f214f7b_cryptolocker_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-06_393311f76f83cd894c7038e61f214f7b_cryptolocker_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.2023-09-06_393311f76f83cd894c7038e61f214f7b_cryptolocker_JC.exe
-
Size
39KB
-
MD5
393311f76f83cd894c7038e61f214f7b
-
SHA1
c4b7e3cff7e8fa982fbb3721cefced16c2b59265
-
SHA256
44ef1ca6a81f096fa49f225c3ecf04b99a0e1949a28850cc2607acfd8d44a448
-
SHA512
3c21abcbfb6cca337ebddf7ce64ddf052813fe9f415a6181f077f4e6a95a2ed8e52c547be54f74ffd28a8db8c3de5f488f345d3efd63e6a17f0c46e8082ffcca
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwV:bc/y2lm6Y0AqJ51mwV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-