Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-06_b633cddfc003be9be432541d3516dd5a_cryptolocker
-
Size
99KB
-
Sample
240107-pe36gsfeg5
-
MD5
b633cddfc003be9be432541d3516dd5a
-
SHA1
b5c202b233bf703a6b7661e0424cbb3eb0953772
-
SHA256
a5b41cb3bdfe82d1c57d8fd4cc03a1eada1fc69fc94e606e2aa15b675f09b537
-
SHA512
e606ec2d2dba01464656a1dd8a280121882d52d55b9721972f94cfa7aa2d9ee23e109f50ae8d174888b3a2af9c912321c0f0ef7420d05bbd074bdefa5a99b260
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviP1g:AnBdOOtEvwDpj6zg
Behavioral task
behavioral1
Sample
2024-01-06_b633cddfc003be9be432541d3516dd5a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_b633cddfc003be9be432541d3516dd5a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-06_b633cddfc003be9be432541d3516dd5a_cryptolocker
-
Size
99KB
-
MD5
b633cddfc003be9be432541d3516dd5a
-
SHA1
b5c202b233bf703a6b7661e0424cbb3eb0953772
-
SHA256
a5b41cb3bdfe82d1c57d8fd4cc03a1eada1fc69fc94e606e2aa15b675f09b537
-
SHA512
e606ec2d2dba01464656a1dd8a280121882d52d55b9721972f94cfa7aa2d9ee23e109f50ae8d174888b3a2af9c912321c0f0ef7420d05bbd074bdefa5a99b260
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviP1g:AnBdOOtEvwDpj6zg
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-