Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-01_3b98555520e5665314aff9604ca3d79b_cryptolocker
-
Size
35KB
-
Sample
240105-gddv7sbgak
-
MD5
3b98555520e5665314aff9604ca3d79b
-
SHA1
e9b0e383ccab689b04ee7145eda20a10b56b9386
-
SHA256
452255975335340cfef7a484cd1077397b5e47ddc9cb8c452375bc1056e36799
-
SHA512
286cf2fec5467ee8968c75f5d6414a24e8ef577be3cd9191143f9c1351d78dbcacd11f40e1edb1d164489ca6ba3b0efb89b0bb038bce9b97146c8884b5a1aa55
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzogFzpjufAq18st8qL1ZA0bg:bAvJCYOOvbRPDEgXVFzpCYVaLlk
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_3b98555520e5665314aff9604ca3d79b_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-01_3b98555520e5665314aff9604ca3d79b_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-01_3b98555520e5665314aff9604ca3d79b_cryptolocker
-
Size
35KB
-
MD5
3b98555520e5665314aff9604ca3d79b
-
SHA1
e9b0e383ccab689b04ee7145eda20a10b56b9386
-
SHA256
452255975335340cfef7a484cd1077397b5e47ddc9cb8c452375bc1056e36799
-
SHA512
286cf2fec5467ee8968c75f5d6414a24e8ef577be3cd9191143f9c1351d78dbcacd11f40e1edb1d164489ca6ba3b0efb89b0bb038bce9b97146c8884b5a1aa55
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzogFzpjufAq18st8qL1ZA0bg:bAvJCYOOvbRPDEgXVFzpCYVaLlk
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-