Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-01_9894d4e2ec69a06212db6c062e71a601_cryptolocker
-
Size
39KB
-
Sample
240105-ggvm5achdn
-
MD5
9894d4e2ec69a06212db6c062e71a601
-
SHA1
bd2f15a9a3c505d1a2a3c9a31627a83dce224547
-
SHA256
d1c77c66e97f0a057a438b968edcbd73cb1cee46183d2fe7d70909c0e228fc75
-
SHA512
da9fc4559a07ddafdbdfd6cc52c163ed6c623bdf4842239a57b763f1e1cfcf37af1fbd6209ae980c6ef47d4cbc750883291c3a03ea323de28a7b6d9f08aab74a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6nzhw:6j+1NMOtEvwDpjrRzi
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_9894d4e2ec69a06212db6c062e71a601_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_9894d4e2ec69a06212db6c062e71a601_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-01_9894d4e2ec69a06212db6c062e71a601_cryptolocker
-
Size
39KB
-
MD5
9894d4e2ec69a06212db6c062e71a601
-
SHA1
bd2f15a9a3c505d1a2a3c9a31627a83dce224547
-
SHA256
d1c77c66e97f0a057a438b968edcbd73cb1cee46183d2fe7d70909c0e228fc75
-
SHA512
da9fc4559a07ddafdbdfd6cc52c163ed6c623bdf4842239a57b763f1e1cfcf37af1fbd6209ae980c6ef47d4cbc750883291c3a03ea323de28a7b6d9f08aab74a
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6nzhw:6j+1NMOtEvwDpjrRzi
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-