Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-09_1482fe226f183e8e28b53baee2e6e3d6_cryptolocker
-
Size
40KB
-
Sample
240809-t7m27asgrj
-
MD5
1482fe226f183e8e28b53baee2e6e3d6
-
SHA1
3ed22d399f96d7329e3ac8d23120639bf6752847
-
SHA256
d1ba9b0a0c31dd933ff179dbde92be688c0394f56450856719531856e642d545
-
SHA512
5b181b05f9c6240f23761604aecb2bdbcfc02218d4cf5f102c00cdd59ede60f6c69c0b55ec80b6161904c89a7f6c124bbdb46b925a6c82e07c500a9ab0bad892
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Upap:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XF
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-09_1482fe226f183e8e28b53baee2e6e3d6_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-09_1482fe226f183e8e28b53baee2e6e3d6_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-09_1482fe226f183e8e28b53baee2e6e3d6_cryptolocker
-
Size
40KB
-
MD5
1482fe226f183e8e28b53baee2e6e3d6
-
SHA1
3ed22d399f96d7329e3ac8d23120639bf6752847
-
SHA256
d1ba9b0a0c31dd933ff179dbde92be688c0394f56450856719531856e642d545
-
SHA512
5b181b05f9c6240f23761604aecb2bdbcfc02218d4cf5f102c00cdd59ede60f6c69c0b55ec80b6161904c89a7f6c124bbdb46b925a6c82e07c500a9ab0bad892
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0Upap:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XF
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-