Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker
-
Size
26KB
-
Sample
240907-bzg7vsyekg
-
MD5
c9a13d6062fa5095ba3136674cfae896
-
SHA1
8c8ccfb6f3e6991cf152670376f0703bafdabd78
-
SHA256
72679ff4d1e53bc75619eeb98730a84375246192c019ca1f40eb1703847ce7d4
-
SHA512
9263c28fa6ce4e14d6b43332f69a081a2663431da6e316b610db745c3e9d4735e9195a0239272e8591a78efba9c63f786daca6db8a8cc84c9fae4621a438b947
-
SSDEEP
384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbN:bIDOw9UiaCHfjnE0S7
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-07_c9a13d6062fa5095ba3136674cfae896_cryptolocker
-
Size
26KB
-
MD5
c9a13d6062fa5095ba3136674cfae896
-
SHA1
8c8ccfb6f3e6991cf152670376f0703bafdabd78
-
SHA256
72679ff4d1e53bc75619eeb98730a84375246192c019ca1f40eb1703847ce7d4
-
SHA512
9263c28fa6ce4e14d6b43332f69a081a2663431da6e316b610db745c3e9d4735e9195a0239272e8591a78efba9c63f786daca6db8a8cc84c9fae4621a438b947
-
SSDEEP
384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbN:bIDOw9UiaCHfjnE0S7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-