Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-09_149eac0fa5e1c97215f7ab19ebd2a5ad_cryptolocker
-
Size
37KB
-
Sample
240110-gjpvnafaal
-
MD5
149eac0fa5e1c97215f7ab19ebd2a5ad
-
SHA1
5eda0e91a7da3f3e36f750d10e92993ae7973ef2
-
SHA256
3e3ebfa913f928bae402b3f3cd90a63af5038bba76580d07b936b8bcd7349bd7
-
SHA512
aedc42ca445ef336b50644a8efeab645c4797cb0673ef1677766a631608ea030538774386f7c4c40dab050a318fba06ab648ba037332def3db144323124be415
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3Jnoehy5s:V6QFElP6n+gMQMOtEvwDpjeJQy1hye
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_149eac0fa5e1c97215f7ab19ebd2a5ad_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_149eac0fa5e1c97215f7ab19ebd2a5ad_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-09_149eac0fa5e1c97215f7ab19ebd2a5ad_cryptolocker
-
Size
37KB
-
MD5
149eac0fa5e1c97215f7ab19ebd2a5ad
-
SHA1
5eda0e91a7da3f3e36f750d10e92993ae7973ef2
-
SHA256
3e3ebfa913f928bae402b3f3cd90a63af5038bba76580d07b936b8bcd7349bd7
-
SHA512
aedc42ca445ef336b50644a8efeab645c4797cb0673ef1677766a631608ea030538774386f7c4c40dab050a318fba06ab648ba037332def3db144323124be415
-
SSDEEP
768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQLI3Jnoehy5s:V6QFElP6n+gMQMOtEvwDpjeJQy1hye
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-