Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe
-
Size
35KB
-
Sample
231106-y3b7caed2w
-
MD5
5b710213f554648a861addf5291ee034
-
SHA1
10232956316337a4556722dcf98604e1890dddc1
-
SHA256
5a3620ac8703aade34d8a0581cbce0e3c8b30c38a06f725e079c3051b512cabd
-
SHA512
dc9ed517353393c667f4c0216c9c39addf7217ec7ccf3d39112a1b0aa09f901483aed2fa15ccac1c78311ba46f1411030ccca98f4810e41985e8d6728b587a99
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5c/sl3:bgX4zYcgTEu6QOaryfjqDDw3sCu5Usl3
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe
-
Size
35KB
-
MD5
5b710213f554648a861addf5291ee034
-
SHA1
10232956316337a4556722dcf98604e1890dddc1
-
SHA256
5a3620ac8703aade34d8a0581cbce0e3c8b30c38a06f725e079c3051b512cabd
-
SHA512
dc9ed517353393c667f4c0216c9c39addf7217ec7ccf3d39112a1b0aa09f901483aed2fa15ccac1c78311ba46f1411030ccca98f4810e41985e8d6728b587a99
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5c/sl3:bgX4zYcgTEu6QOaryfjqDDw3sCu5Usl3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-