Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-06_c3d0a4c8ec09a3da1aa6014d66b4b911_cryptolocker
-
Size
44KB
-
Sample
240906-bafbzaxgnd
-
MD5
c3d0a4c8ec09a3da1aa6014d66b4b911
-
SHA1
8d3fb90d5e362b6c5ae9f0bd78764320f66d3436
-
SHA256
cbe6112f147537a1e9d59990ca5e77bedf93204063b3eb5d0d5ea436b66070cb
-
SHA512
0a1688b5b7af7d0f38dfcbeacb0d3d4ee91a1024982343adc02007b45496dbddf67708385e4368cd33611657474c3bd54df4a6199c31a6a8d612d6fff1f625a0
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TV:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLV
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-06_c3d0a4c8ec09a3da1aa6014d66b4b911_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-06_c3d0a4c8ec09a3da1aa6014d66b4b911_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-06_c3d0a4c8ec09a3da1aa6014d66b4b911_cryptolocker
-
Size
44KB
-
MD5
c3d0a4c8ec09a3da1aa6014d66b4b911
-
SHA1
8d3fb90d5e362b6c5ae9f0bd78764320f66d3436
-
SHA256
cbe6112f147537a1e9d59990ca5e77bedf93204063b3eb5d0d5ea436b66070cb
-
SHA512
0a1688b5b7af7d0f38dfcbeacb0d3d4ee91a1024982343adc02007b45496dbddf67708385e4368cd33611657474c3bd54df4a6199c31a6a8d612d6fff1f625a0
-
SSDEEP
768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1TV:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-