Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-10_79272b79d999210e11dd2c8d51500a80_cryptolocker
-
Size
130KB
-
Sample
240111-gkrewaghgq
-
MD5
79272b79d999210e11dd2c8d51500a80
-
SHA1
f21fa4af335e2e88956b8ef67cde7a49277b2c67
-
SHA256
82a0858cbca51c5c44f815861642668609bb69853f3a98914488b75404c48419
-
SHA512
389123a37b1f79cf1d23003a66960a5ec7713e58bdf5e78e5f021638fc9831fa36943496c160420c63af9b8968483c0a6ca469d7f017d5bbd5b765276bd66228
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbO:V6a+pOtEvwDpjt22C
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_79272b79d999210e11dd2c8d51500a80_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-10_79272b79d999210e11dd2c8d51500a80_cryptolocker.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
2024-01-10_79272b79d999210e11dd2c8d51500a80_cryptolocker
-
Size
130KB
-
MD5
79272b79d999210e11dd2c8d51500a80
-
SHA1
f21fa4af335e2e88956b8ef67cde7a49277b2c67
-
SHA256
82a0858cbca51c5c44f815861642668609bb69853f3a98914488b75404c48419
-
SHA512
389123a37b1f79cf1d23003a66960a5ec7713e58bdf5e78e5f021638fc9831fa36943496c160420c63af9b8968483c0a6ca469d7f017d5bbd5b765276bd66228
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbO:V6a+pOtEvwDpjt22C
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-