Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-09_2eb70fb3d84e961d34bb707d74ffbdf9_cryptolocker
-
Size
54KB
-
Sample
240110-gkkx4afcfj
-
MD5
2eb70fb3d84e961d34bb707d74ffbdf9
-
SHA1
b5cb869c433564c44608b3e6032f2dba411b010c
-
SHA256
3b750457014b1ca5bd1dbd1d72c038b261084c250f71ee2e06a633da2623ca33
-
SHA512
33bbdf55b57f566623ab6387f4e73a305477ef5924a9d629d028291f94544494107fa119cbf0f9b0357b2e1d7c5c4ba8dcafb1687262364fb25ea69c0e7529b4
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHJ:btng54SMLr+/AO/kIhfoKMHdA
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_2eb70fb3d84e961d34bb707d74ffbdf9_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_2eb70fb3d84e961d34bb707d74ffbdf9_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-09_2eb70fb3d84e961d34bb707d74ffbdf9_cryptolocker
-
Size
54KB
-
MD5
2eb70fb3d84e961d34bb707d74ffbdf9
-
SHA1
b5cb869c433564c44608b3e6032f2dba411b010c
-
SHA256
3b750457014b1ca5bd1dbd1d72c038b261084c250f71ee2e06a633da2623ca33
-
SHA512
33bbdf55b57f566623ab6387f4e73a305477ef5924a9d629d028291f94544494107fa119cbf0f9b0357b2e1d7c5c4ba8dcafb1687262364fb25ea69c0e7529b4
-
SSDEEP
1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHJ:btng54SMLr+/AO/kIhfoKMHdA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-