Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
202405222861095e3a9deecd5d1e5d034a957a24cryptolocker
-
Size
40KB
-
Sample
240522-x8f7tadg98
-
MD5
2861095e3a9deecd5d1e5d034a957a24
-
SHA1
93a90a26331f27c2fcd0574645d8d5ac60981267
-
SHA256
6afb7a2388d9c1b1c55f6e62446c0999e7529cfc2e09b04fb55e0bb591e19e7f
-
SHA512
1518545e556087555f80d959860a4fe412fb2550afda67e2ebdf8de3844460c26df6c5f9c92b44372360ddf8a2e839b7a96cffff01d81f6eb19f64ca430e61ea
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYoq:qDdFJy3QMOtEvwDpjjWMl7Tlq
Behavioral task
behavioral1
Sample
202405222861095e3a9deecd5d1e5d034a957a24cryptolocker.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
202405222861095e3a9deecd5d1e5d034a957a24cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
202405222861095e3a9deecd5d1e5d034a957a24cryptolocker
-
Size
40KB
-
MD5
2861095e3a9deecd5d1e5d034a957a24
-
SHA1
93a90a26331f27c2fcd0574645d8d5ac60981267
-
SHA256
6afb7a2388d9c1b1c55f6e62446c0999e7529cfc2e09b04fb55e0bb591e19e7f
-
SHA512
1518545e556087555f80d959860a4fe412fb2550afda67e2ebdf8de3844460c26df6c5f9c92b44372360ddf8a2e839b7a96cffff01d81f6eb19f64ca430e61ea
-
SSDEEP
768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYoq:qDdFJy3QMOtEvwDpjjWMl7Tlq
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-