Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker
-
Size
29KB
-
Sample
240829-wqdhjatgle
-
MD5
8bb81d1818d04ffd54839a4658eef3be
-
SHA1
b0d733d56f3a0f34c56080ec47a6c36f1eb9188b
-
SHA256
4f15d8a23e4425ab555addf8bfadaad0ef9e768d8cd27b74efbc30923fd7962b
-
SHA512
3d8d8c899454ad26c3758e3fed38c4bfc5f2c2dc2b69148db042c0b09e1adf1ed97533326d6dc3df1af8effc875c9680556186b65ecba327064738c4a3e5b122
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGuZt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-29_8bb81d1818d04ffd54839a4658eef3be_cryptolocker
-
Size
29KB
-
MD5
8bb81d1818d04ffd54839a4658eef3be
-
SHA1
b0d733d56f3a0f34c56080ec47a6c36f1eb9188b
-
SHA256
4f15d8a23e4425ab555addf8bfadaad0ef9e768d8cd27b74efbc30923fd7962b
-
SHA512
3d8d8c899454ad26c3758e3fed38c4bfc5f2c2dc2b69148db042c0b09e1adf1ed97533326d6dc3df1af8effc875c9680556186b65ecba327064738c4a3e5b122
-
SSDEEP
768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGuZt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-