Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-29_0b3a99a0048cbe9ead0658fed5b96a94_cryptolocker
-
Size
55KB
-
Sample
240829-klj9qsscpa
-
MD5
0b3a99a0048cbe9ead0658fed5b96a94
-
SHA1
5b820e9b2454e544b31fbd308822a51d5f7fbc18
-
SHA256
862779dfdf4d76451f046f431bdcda03969d25bc57b2f06a05871fb1347cea21
-
SHA512
1b4fd48d104bea8ec5d2f7a8eb85cdd89abf01eb9cf2020afe2a49a52a929e6a36ff56f96c0733d5d433c1bba312d5bd9d00dc1f6ee6161c01b9cd2cd9e9ffe6
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIJ4:X6QFElP6n+gJBMOtEvwDpjBtExml24
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-29_0b3a99a0048cbe9ead0658fed5b96a94_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-29_0b3a99a0048cbe9ead0658fed5b96a94_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-29_0b3a99a0048cbe9ead0658fed5b96a94_cryptolocker
-
Size
55KB
-
MD5
0b3a99a0048cbe9ead0658fed5b96a94
-
SHA1
5b820e9b2454e544b31fbd308822a51d5f7fbc18
-
SHA256
862779dfdf4d76451f046f431bdcda03969d25bc57b2f06a05871fb1347cea21
-
SHA512
1b4fd48d104bea8ec5d2f7a8eb85cdd89abf01eb9cf2020afe2a49a52a929e6a36ff56f96c0733d5d433c1bba312d5bd9d00dc1f6ee6161c01b9cd2cd9e9ffe6
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIJ4:X6QFElP6n+gJBMOtEvwDpjBtExml24
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-