Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-20_84847084d9ec050f56374785338dd87f_cryptolocker
-
Size
44KB
-
Sample
240620-d2mw8swepf
-
MD5
84847084d9ec050f56374785338dd87f
-
SHA1
c960f10229b5baf12728df5f19144720b4ed1a8b
-
SHA256
f4005deed0f6bf158a9f5816f2dfce93daac8f3d52f4ae2a4509511fd9bd6453
-
SHA512
687f295228d7647ea67e313e7654852efccb7a399f16ad3208a92a523c641712870933719193e07312bcee2fb84d456e7450b406553d8e812839f840bf7b8fa3
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyO:btB9g/WItCSsAGjX7e9N0hunrknljKru
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-20_84847084d9ec050f56374785338dd87f_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-20_84847084d9ec050f56374785338dd87f_cryptolocker.exe
Resource
win10v2004-20240611-en
Malware Config
Targets
-
-
Target
2024-06-20_84847084d9ec050f56374785338dd87f_cryptolocker
-
Size
44KB
-
MD5
84847084d9ec050f56374785338dd87f
-
SHA1
c960f10229b5baf12728df5f19144720b4ed1a8b
-
SHA256
f4005deed0f6bf158a9f5816f2dfce93daac8f3d52f4ae2a4509511fd9bd6453
-
SHA512
687f295228d7647ea67e313e7654852efccb7a399f16ad3208a92a523c641712870933719193e07312bcee2fb84d456e7450b406553d8e812839f840bf7b8fa3
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwIxZWQpyO:btB9g/WItCSsAGjX7e9N0hunrknljKru
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-