Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-04_1fcc79ebd6e7f36785c06c2062b2bc8b_cryptolocker
-
Size
44KB
-
Sample
240904-ql7ypasblc
-
MD5
1fcc79ebd6e7f36785c06c2062b2bc8b
-
SHA1
a00e17cde1c2818e4f7205478d876a791940c807
-
SHA256
28543ad52a0f9f952f73f0cf372e45b4210cc8d2d901079e428f57dbc6bfbd3d
-
SHA512
d5aa2f333e6ebe7a6cfe9a3b065dfd7379ab35434ad210f3b8cbbbb912f188ac5cf5e4245c3c198731ee2550ea64b99599b4f07e492949218b45a0191ceace31
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1T2:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL2
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-04_1fcc79ebd6e7f36785c06c2062b2bc8b_cryptolocker.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2024-09-04_1fcc79ebd6e7f36785c06c2062b2bc8b_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-04_1fcc79ebd6e7f36785c06c2062b2bc8b_cryptolocker
-
Size
44KB
-
MD5
1fcc79ebd6e7f36785c06c2062b2bc8b
-
SHA1
a00e17cde1c2818e4f7205478d876a791940c807
-
SHA256
28543ad52a0f9f952f73f0cf372e45b4210cc8d2d901079e428f57dbc6bfbd3d
-
SHA512
d5aa2f333e6ebe7a6cfe9a3b065dfd7379ab35434ad210f3b8cbbbb912f188ac5cf5e4245c3c198731ee2550ea64b99599b4f07e492949218b45a0191ceace31
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1T2:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkL2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-