Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-01-11_b9ab2ffd5bae576fb74e709a8389645a_cryptolocker
-
Size
43KB
-
Sample
240112-gs5mgahhcl
-
MD5
b9ab2ffd5bae576fb74e709a8389645a
-
SHA1
4165cdae0f054cfa6ab819859718accbab36b0d4
-
SHA256
8eaf4053cfc3932702a510c645d7be83a14228c731d9da9a23d77fd3fc5715f9
-
SHA512
9a7492875f02511c819952e5562e88980c9bdf49d4600d98e814b459076f27232ffe1213367479e56bb180e2af14b0a4cae7ce771c4cc95a3ebd016023459286
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx8:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xt
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_b9ab2ffd5bae576fb74e709a8389645a_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_b9ab2ffd5bae576fb74e709a8389645a_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-01-11_b9ab2ffd5bae576fb74e709a8389645a_cryptolocker
-
Size
43KB
-
MD5
b9ab2ffd5bae576fb74e709a8389645a
-
SHA1
4165cdae0f054cfa6ab819859718accbab36b0d4
-
SHA256
8eaf4053cfc3932702a510c645d7be83a14228c731d9da9a23d77fd3fc5715f9
-
SHA512
9a7492875f02511c819952e5562e88980c9bdf49d4600d98e814b459076f27232ffe1213367479e56bb180e2af14b0a4cae7ce771c4cc95a3ebd016023459286
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx8:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xt
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-