Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.2023-09-06_4b49507bbdf9775141d4e6209e60d13a_cryptolocker_JC.exe
-
Size
41KB
-
Sample
231023-znpdssfd9y
-
MD5
4b49507bbdf9775141d4e6209e60d13a
-
SHA1
812c52846b4b414b2456949a2c93aefc11ce1241
-
SHA256
3e2397413325f6129609fd218cd032909e5e2caa79533fc62e9805abc660a3b7
-
SHA512
d8e3cb6f7d9c04569bf7b9463285435fd1b663059b788aef3877bc8d2f7aad5e2780737efc06d3153b0b86e97720f611bc5dda16751fcb5ff80c3f836ea529b8
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+k:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+w
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-06_4b49507bbdf9775141d4e6209e60d13a_cryptolocker_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-06_4b49507bbdf9775141d4e6209e60d13a_cryptolocker_JC.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.2023-09-06_4b49507bbdf9775141d4e6209e60d13a_cryptolocker_JC.exe
-
Size
41KB
-
MD5
4b49507bbdf9775141d4e6209e60d13a
-
SHA1
812c52846b4b414b2456949a2c93aefc11ce1241
-
SHA256
3e2397413325f6129609fd218cd032909e5e2caa79533fc62e9805abc660a3b7
-
SHA512
d8e3cb6f7d9c04569bf7b9463285435fd1b663059b788aef3877bc8d2f7aad5e2780737efc06d3153b0b86e97720f611bc5dda16751fcb5ff80c3f836ea529b8
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+k:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+w
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-