Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-06-27_91d9a61da9c74832f1fda0d923eda472_cryptolocker
-
Size
47KB
-
Sample
240627-sv7qdsxfkd
-
MD5
91d9a61da9c74832f1fda0d923eda472
-
SHA1
a0080f131506295c5dc261a75524da15b4abd00a
-
SHA256
21c265146c6702b6b3ad39fdfbef3fd086cec84d16e4ea8e47a03c17dff937b8
-
SHA512
b88192a581688e92f4454e79cf46a1e4e374bcea1313a038e4c322005ed5399622394d4ef4e93a11ad296975c85ea75245021899eebae9025db2fe7e06f4adec
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAs:P6QFElP6k+MRQMOtEvwDpjBQpVX8As
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-27_91d9a61da9c74832f1fda0d923eda472_cryptolocker.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-27_91d9a61da9c74832f1fda0d923eda472_cryptolocker.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-06-27_91d9a61da9c74832f1fda0d923eda472_cryptolocker
-
Size
47KB
-
MD5
91d9a61da9c74832f1fda0d923eda472
-
SHA1
a0080f131506295c5dc261a75524da15b4abd00a
-
SHA256
21c265146c6702b6b3ad39fdfbef3fd086cec84d16e4ea8e47a03c17dff937b8
-
SHA512
b88192a581688e92f4454e79cf46a1e4e374bcea1313a038e4c322005ed5399622394d4ef4e93a11ad296975c85ea75245021899eebae9025db2fe7e06f4adec
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAs:P6QFElP6k+MRQMOtEvwDpjBQpVX8As
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-