Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.2023-09-08_054e63fe1c68aa45f2c3f0ba7ab368fa_cryptolocker_JC.exe
-
Size
89KB
-
Sample
231023-zjfabsfc6y
-
MD5
054e63fe1c68aa45f2c3f0ba7ab368fa
-
SHA1
1b9ecc1dfd74bbfc302d562887d4285416bb260b
-
SHA256
951f3e5191b9f4eac70974d349cadb5bd4dfcff407bf2364f0bb9991076c3674
-
SHA512
426d2ceb6928c18833898520bdc729eaf2237e2af867c3588e35c276b669207bb83cca5a28611616819715103784e9a6177c91059d2e2d11fea1e827d7e47c8e
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3F:V6a+pOtEvwDpjtr
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-08_054e63fe1c68aa45f2c3f0ba7ab368fa_cryptolocker_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-08_054e63fe1c68aa45f2c3f0ba7ab368fa_cryptolocker_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.2023-09-08_054e63fe1c68aa45f2c3f0ba7ab368fa_cryptolocker_JC.exe
-
Size
89KB
-
MD5
054e63fe1c68aa45f2c3f0ba7ab368fa
-
SHA1
1b9ecc1dfd74bbfc302d562887d4285416bb260b
-
SHA256
951f3e5191b9f4eac70974d349cadb5bd4dfcff407bf2364f0bb9991076c3674
-
SHA512
426d2ceb6928c18833898520bdc729eaf2237e2af867c3588e35c276b669207bb83cca5a28611616819715103784e9a6177c91059d2e2d11fea1e827d7e47c8e
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3F:V6a+pOtEvwDpjtr
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-