Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-07_151833f07a9264985d2317db2e25d103_cryptolocker
-
Size
45KB
-
Sample
240907-asac1avgpk
-
MD5
151833f07a9264985d2317db2e25d103
-
SHA1
dfdab2a0d539743c15223080bc9af238efa04966
-
SHA256
464c25b0e403f7898724d31a233baf77a205606653b9270254bc46fc75192371
-
SHA512
4cbf13149ca73c177ca752465f77a07571bba935fe092aa8afd7932deb789586d47442c4887edcfac9ab1fd133e31e23048a8fe1a1a86c54aac64e5c7add5706
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAP+p:P6QFElP6k+MRQMOtEvwDpjBQpVXj
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-07_151833f07a9264985d2317db2e25d103_cryptolocker.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-09-07_151833f07a9264985d2317db2e25d103_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-07_151833f07a9264985d2317db2e25d103_cryptolocker
-
Size
45KB
-
MD5
151833f07a9264985d2317db2e25d103
-
SHA1
dfdab2a0d539743c15223080bc9af238efa04966
-
SHA256
464c25b0e403f7898724d31a233baf77a205606653b9270254bc46fc75192371
-
SHA512
4cbf13149ca73c177ca752465f77a07571bba935fe092aa8afd7932deb789586d47442c4887edcfac9ab1fd133e31e23048a8fe1a1a86c54aac64e5c7add5706
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAP+p:P6QFElP6k+MRQMOtEvwDpjBQpVXj
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-