Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-19_589de5b51c56e34ac92d5926b2c6caab_cryptolocker
-
Size
46KB
-
Sample
240919-e24ena1drq
-
MD5
589de5b51c56e34ac92d5926b2c6caab
-
SHA1
854585b8f466bb3d7afee70a7c1926c9a7c1af02
-
SHA256
b22797dd0711911595fc1f3e7d88d8b3ce0cec94450561ec232ce20d4abe577f
-
SHA512
ad767c4b07500f72051eb3418bff1c23934be59ddfe47e3ba8b3d3b6151ec49b890608287b54a3a341fd76ec91f98b91efe00c4221eab6867348529b04ef2c2c
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoLc:qmbhXDmjr5MOtEvwDpj5cDtKkQZQy
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-19_589de5b51c56e34ac92d5926b2c6caab_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-19_589de5b51c56e34ac92d5926b2c6caab_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-19_589de5b51c56e34ac92d5926b2c6caab_cryptolocker
-
Size
46KB
-
MD5
589de5b51c56e34ac92d5926b2c6caab
-
SHA1
854585b8f466bb3d7afee70a7c1926c9a7c1af02
-
SHA256
b22797dd0711911595fc1f3e7d88d8b3ce0cec94450561ec232ce20d4abe577f
-
SHA512
ad767c4b07500f72051eb3418bff1c23934be59ddfe47e3ba8b3d3b6151ec49b890608287b54a3a341fd76ec91f98b91efe00c4221eab6867348529b04ef2c2c
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoLc:qmbhXDmjr5MOtEvwDpj5cDtKkQZQy
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-