Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
202405217df5e417f529ff849032c950e57b5ba3cryptolocker
-
Size
95KB
-
Sample
240522-f8fgvadd85
-
MD5
7df5e417f529ff849032c950e57b5ba3
-
SHA1
194fcdb28457a6594a0b7b5d34e68a1aff083bdb
-
SHA256
507e731f16e6fdf1f74e737301c3822bf9ec1cbc530c60a07ac6c854fecfac9b
-
SHA512
7ad09076ccd4ef1d9ac809e06adf61fdc3ae3d03cb93f618d35e8a0a2aaa5a3fed15af234ca0dbfdff756e7f37b6f1922a13f62e9c27047f24150e1e2230996d
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+D:AnBdOOtEvwDpj6zw
Behavioral task
behavioral1
Sample
202405217df5e417f529ff849032c950e57b5ba3cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
202405217df5e417f529ff849032c950e57b5ba3cryptolocker.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
202405217df5e417f529ff849032c950e57b5ba3cryptolocker
-
Size
95KB
-
MD5
7df5e417f529ff849032c950e57b5ba3
-
SHA1
194fcdb28457a6594a0b7b5d34e68a1aff083bdb
-
SHA256
507e731f16e6fdf1f74e737301c3822bf9ec1cbc530c60a07ac6c854fecfac9b
-
SHA512
7ad09076ccd4ef1d9ac809e06adf61fdc3ae3d03cb93f618d35e8a0a2aaa5a3fed15af234ca0dbfdff756e7f37b6f1922a13f62e9c27047f24150e1e2230996d
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp0+D:AnBdOOtEvwDpj6zw
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-