Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-10_0371bc7e03cb5d3b2394db8807657a65_cryptolocker
-
Size
33KB
-
Sample
240111-gftdnsffal
-
MD5
0371bc7e03cb5d3b2394db8807657a65
-
SHA1
ede1e275a06bc80e27129cfa7f334fe79f13bdce
-
SHA256
b92aae38718bca984d2b11abc7dd6a1eed50b7dda5141ef14b5e64e42df5ab2a
-
SHA512
d18c8f833f4567292882ab6d613e96e6e8cdd691625fb05b66df24427b4e496e61eef6613fbec27872e5b3d2c47a4d28c47d35423a5f9858460fb753379e5c8c
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStwIoIQ+dHd9PRc+H:b/yC4GyNM01GuQMNXw2PSjS2uvdHd9lH
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_0371bc7e03cb5d3b2394db8807657a65_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_0371bc7e03cb5d3b2394db8807657a65_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-10_0371bc7e03cb5d3b2394db8807657a65_cryptolocker
-
Size
33KB
-
MD5
0371bc7e03cb5d3b2394db8807657a65
-
SHA1
ede1e275a06bc80e27129cfa7f334fe79f13bdce
-
SHA256
b92aae38718bca984d2b11abc7dd6a1eed50b7dda5141ef14b5e64e42df5ab2a
-
SHA512
d18c8f833f4567292882ab6d613e96e6e8cdd691625fb05b66df24427b4e496e61eef6613fbec27872e5b3d2c47a4d28c47d35423a5f9858460fb753379e5c8c
-
SSDEEP
384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStwIoIQ+dHd9PRc+H:b/yC4GyNM01GuQMNXw2PSjS2uvdHd9lH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-