Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-07-26_444a82e95246a4f03401e95a6e223509_cryptolocker
-
Size
394KB
-
Sample
240726-xdxajsxdpl
-
MD5
444a82e95246a4f03401e95a6e223509
-
SHA1
9dc3331cc917e455576599285e83bb2cb3217dc6
-
SHA256
7944a04da926a1d23af093f64a39c9475711b6b74ea5036cd55d6f329c503452
-
SHA512
3d1ec5dce157972bc38121db9838aa5f0b54ae71800f6509c02cb5871f2ff3fc6b97406a4daf88c199445f94fbee9ba77e9a0e28e2fe453b5b4aeea54a825a15
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR2:nnOflT/ZFIjBz3xjTxynGUOUhXR2
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-26_444a82e95246a4f03401e95a6e223509_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-26_444a82e95246a4f03401e95a6e223509_cryptolocker.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
2024-07-26_444a82e95246a4f03401e95a6e223509_cryptolocker
-
Size
394KB
-
MD5
444a82e95246a4f03401e95a6e223509
-
SHA1
9dc3331cc917e455576599285e83bb2cb3217dc6
-
SHA256
7944a04da926a1d23af093f64a39c9475711b6b74ea5036cd55d6f329c503452
-
SHA512
3d1ec5dce157972bc38121db9838aa5f0b54ae71800f6509c02cb5871f2ff3fc6b97406a4daf88c199445f94fbee9ba77e9a0e28e2fe453b5b4aeea54a825a15
-
SSDEEP
6144:nnOsaQgAOjvrZFODJjBz3j1jTqQy6v2GGnugOtihzXR2:nnOflT/ZFIjBz3xjTxynGUOUhXR2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-