Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-11_97e5f6fd06615e74350b2f20c8053052_cryptolocker
-
Size
38KB
-
Sample
240112-gr1bcshder
-
MD5
97e5f6fd06615e74350b2f20c8053052
-
SHA1
5ab19b6b7b319b45b7e21caa4c5bae4fb2c8c42c
-
SHA256
90ae173657759784d572da60ffb192bf1591880fd1963ee8be7b4f2db1814bd8
-
SHA512
aa1a3b2291b474fa698d34fea9fa9751d9f466c768cdcdec2198dd3ef1dc1c358e4b888d1d3761eb384a529453eb22118556e6f48175863a3999b8596306271c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbF1:bxNrC7kYo1Fxf3s05rwxbF1
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_97e5f6fd06615e74350b2f20c8053052_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_97e5f6fd06615e74350b2f20c8053052_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-11_97e5f6fd06615e74350b2f20c8053052_cryptolocker
-
Size
38KB
-
MD5
97e5f6fd06615e74350b2f20c8053052
-
SHA1
5ab19b6b7b319b45b7e21caa4c5bae4fb2c8c42c
-
SHA256
90ae173657759784d572da60ffb192bf1591880fd1963ee8be7b4f2db1814bd8
-
SHA512
aa1a3b2291b474fa698d34fea9fa9751d9f466c768cdcdec2198dd3ef1dc1c358e4b888d1d3761eb384a529453eb22118556e6f48175863a3999b8596306271c
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbF1:bxNrC7kYo1Fxf3s05rwxbF1
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-