Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-21_921d156ea06ce8d1fa3ae580a6a0b2ce_cryptolocker
-
Size
63KB
-
Sample
240921-tav2jazglh
-
MD5
921d156ea06ce8d1fa3ae580a6a0b2ce
-
SHA1
5bd61f4baba4d9aab1bb9dbdfd8bc718f6d36bc4
-
SHA256
a12cd773ed121002eabc07b99ad8088cc79be6c78808b13526d79018b35c65a4
-
SHA512
f6e4e17eeb695dd221938abe8ecf92c5b8f5d9abb9527f9935b26173e06ce5f3a6569bd912a998e7754b0b3edc2c9c611fa7b489b168b5a123294d70a49dc491
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzopM:X6a+SOtEvwDpjBrOr
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-21_921d156ea06ce8d1fa3ae580a6a0b2ce_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-21_921d156ea06ce8d1fa3ae580a6a0b2ce_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-21_921d156ea06ce8d1fa3ae580a6a0b2ce_cryptolocker
-
Size
63KB
-
MD5
921d156ea06ce8d1fa3ae580a6a0b2ce
-
SHA1
5bd61f4baba4d9aab1bb9dbdfd8bc718f6d36bc4
-
SHA256
a12cd773ed121002eabc07b99ad8088cc79be6c78808b13526d79018b35c65a4
-
SHA512
f6e4e17eeb695dd221938abe8ecf92c5b8f5d9abb9527f9935b26173e06ce5f3a6569bd912a998e7754b0b3edc2c9c611fa7b489b168b5a123294d70a49dc491
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzopM:X6a+SOtEvwDpjBrOr
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-