Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-11_364dac4c47a17586d4889a0759eb2a64_cryptolocker
-
Size
86KB
-
Sample
240811-zhc4ksxcll
-
MD5
364dac4c47a17586d4889a0759eb2a64
-
SHA1
5c671ded31f14bec48d90949c566b4bc4c8a736e
-
SHA256
f01f9a128c83b99fbe0b5630c4ed6649495616614d4b3567c358120f7a8c5102
-
SHA512
bd61602b13d56069206b4f3bdc069db37ef0bf59b9a4065b683b1a1e3ed62d8eeb99fe7b9e3db55a66569177a20d29e5cd705f34d248ada1b8c8d30da464fbdc
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCs6:TCjsIOtEvwDpj5HE/OUHnSM+
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-11_364dac4c47a17586d4889a0759eb2a64_cryptolocker.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-11_364dac4c47a17586d4889a0759eb2a64_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-11_364dac4c47a17586d4889a0759eb2a64_cryptolocker
-
Size
86KB
-
MD5
364dac4c47a17586d4889a0759eb2a64
-
SHA1
5c671ded31f14bec48d90949c566b4bc4c8a736e
-
SHA256
f01f9a128c83b99fbe0b5630c4ed6649495616614d4b3567c358120f7a8c5102
-
SHA512
bd61602b13d56069206b4f3bdc069db37ef0bf59b9a4065b683b1a1e3ed62d8eeb99fe7b9e3db55a66569177a20d29e5cd705f34d248ada1b8c8d30da464fbdc
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCs6:TCjsIOtEvwDpj5HE/OUHnSM+
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-