Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-19_d8d835270f6776854169d1cce9f3358e_cryptolocker
-
Size
48KB
-
Sample
240919-d9wt4szblj
-
MD5
d8d835270f6776854169d1cce9f3358e
-
SHA1
a2ace11182497916f690ac78968375735452bba5
-
SHA256
318c534110eb09f5edf34c537c09705141f7832cca87ce64129dec5ac9234396
-
SHA512
d97766e5effa569cd85f83f12140bf271d40e4633b2e2a93ed179a543c774025ae398cb69fbcb4d5543bb95a724ab27401d88136e25903311df32a43322de60c
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlU:P6QFElP6k+MRQMOtEvwDpjBQpVX8U
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_d8d835270f6776854169d1cce9f3358e_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-19_d8d835270f6776854169d1cce9f3358e_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-19_d8d835270f6776854169d1cce9f3358e_cryptolocker
-
Size
48KB
-
MD5
d8d835270f6776854169d1cce9f3358e
-
SHA1
a2ace11182497916f690ac78968375735452bba5
-
SHA256
318c534110eb09f5edf34c537c09705141f7832cca87ce64129dec5ac9234396
-
SHA512
d97766e5effa569cd85f83f12140bf271d40e4633b2e2a93ed179a543c774025ae398cb69fbcb4d5543bb95a724ab27401d88136e25903311df32a43322de60c
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlU:P6QFElP6k+MRQMOtEvwDpjBQpVX8U
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-