Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-07-06_816841ee3be543294c8011bf673a936d_cryptolocker
-
Size
43KB
-
Sample
240706-s5escstbml
-
MD5
816841ee3be543294c8011bf673a936d
-
SHA1
2b1a67020e7e6e467b0706933ab24c488b53570d
-
SHA256
f068b3698c58b8258815e76859b89e4bc9fc8a6fd44088d0843f567397a9d8c0
-
SHA512
b72ceb454e2ccac1827d6cdcee7f201fe203d7c8f0e89469c9dff9ecb648d2a16eb7858df004089ea8c5e4b2d8d7cc93a9820bd35b083083572cc026a935a286
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadr:bm74zYcgT/EkM0ryfjPdr
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-06_816841ee3be543294c8011bf673a936d_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-07-06_816841ee3be543294c8011bf673a936d_cryptolocker.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
2024-07-06_816841ee3be543294c8011bf673a936d_cryptolocker
-
Size
43KB
-
MD5
816841ee3be543294c8011bf673a936d
-
SHA1
2b1a67020e7e6e467b0706933ab24c488b53570d
-
SHA256
f068b3698c58b8258815e76859b89e4bc9fc8a6fd44088d0843f567397a9d8c0
-
SHA512
b72ceb454e2ccac1827d6cdcee7f201fe203d7c8f0e89469c9dff9ecb648d2a16eb7858df004089ea8c5e4b2d8d7cc93a9820bd35b083083572cc026a935a286
-
SSDEEP
384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUadr:bm74zYcgT/EkM0ryfjPdr
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-