Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b
-
Size
146KB
-
Sample
240404-1ery1abf85
-
MD5
49ecb48e3cc3edd3f3c919e0705e5e0d
-
SHA1
4916b33fe4dbd180f02c2e95c31cf4ea279f628c
-
SHA256
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b
-
SHA512
f0d2c46fc91631195191a86327321da14ebf6baf364bd77cc9b9aaf6ec1c97adada6e306d77e9cbf1a46a1854a69a76c0e27889a7cca98a238722e8a6d7370c6
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPFk:V6a+pOtEvwDpjt22Q
Static task
static1
Behavioral task
behavioral1
Sample
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b.exe
Resource
win10v2004-20240319-en
Malware Config
Targets
-
-
Target
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b
-
Size
146KB
-
MD5
49ecb48e3cc3edd3f3c919e0705e5e0d
-
SHA1
4916b33fe4dbd180f02c2e95c31cf4ea279f628c
-
SHA256
66ff59563927b0b36681f00bdcf71a2da52500c6d0f26786b778b844f384f71b
-
SHA512
f0d2c46fc91631195191a86327321da14ebf6baf364bd77cc9b9aaf6ec1c97adada6e306d77e9cbf1a46a1854a69a76c0e27889a7cca98a238722e8a6d7370c6
-
SSDEEP
1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbPlooHPPFk:V6a+pOtEvwDpjt22Q
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-