Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-11_91b3952c1b085ea2d426340f27f61841_cryptolocker
-
Size
48KB
-
Sample
240112-grsaraacd2
-
MD5
91b3952c1b085ea2d426340f27f61841
-
SHA1
a4b86a6e15a1ba72bf17c97ea060f75f37393157
-
SHA256
a6d12f3c8c4e4f533e8d25d0f858a091dfb07f7ec6914c1ed3c277ce09101384
-
SHA512
33405f545341c7bccf9e57cc5fc780d1b7040e9f427c2b01e281c6bd6ac2dbf429b31915ab1dc2a14c0abe3726c67f50798683c5ba8ae693fc23aca97643eb20
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPxyV4tFVgQuj:bIDOw9a0Dwo3P1ojvUSD4PRtFVgvj
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_91b3952c1b085ea2d426340f27f61841_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_91b3952c1b085ea2d426340f27f61841_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-11_91b3952c1b085ea2d426340f27f61841_cryptolocker
-
Size
48KB
-
MD5
91b3952c1b085ea2d426340f27f61841
-
SHA1
a4b86a6e15a1ba72bf17c97ea060f75f37393157
-
SHA256
a6d12f3c8c4e4f533e8d25d0f858a091dfb07f7ec6914c1ed3c277ce09101384
-
SHA512
33405f545341c7bccf9e57cc5fc780d1b7040e9f427c2b01e281c6bd6ac2dbf429b31915ab1dc2a14c0abe3726c67f50798683c5ba8ae693fc23aca97643eb20
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPxyV4tFVgQuj:bIDOw9a0Dwo3P1ojvUSD4PRtFVgvj
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-