Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-11_1970c596cdbbf2ba5d66d2bd54609e3a_cryptolocker
-
Size
86KB
-
Sample
240811-zgzk7axcjl
-
MD5
1970c596cdbbf2ba5d66d2bd54609e3a
-
SHA1
825eca8b71583f9b85d956e333ff1dcd1b61b3e8
-
SHA256
798dbabd97bb9218e57bf35842d29d7393982c4a4392f357034c744295104841
-
SHA512
ecefc84da2c338926800a557b04be3e398397ec9843f509bff14521409029c22aaba9de85e99be9276a19976001ed6fd2d498cdd08e22e79793d250b4a433879
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsK:TCjsIOtEvwDpj5HE/OUHnSMu
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-11_1970c596cdbbf2ba5d66d2bd54609e3a_cryptolocker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-11_1970c596cdbbf2ba5d66d2bd54609e3a_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-11_1970c596cdbbf2ba5d66d2bd54609e3a_cryptolocker
-
Size
86KB
-
MD5
1970c596cdbbf2ba5d66d2bd54609e3a
-
SHA1
825eca8b71583f9b85d956e333ff1dcd1b61b3e8
-
SHA256
798dbabd97bb9218e57bf35842d29d7393982c4a4392f357034c744295104841
-
SHA512
ecefc84da2c338926800a557b04be3e398397ec9843f509bff14521409029c22aaba9de85e99be9276a19976001ed6fd2d498cdd08e22e79793d250b4a433879
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsK:TCjsIOtEvwDpj5HE/OUHnSMu
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-