Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-21_0fd989adc9c38b9c1763ad454191c767_cryptolocker
-
Size
51KB
-
Sample
240921-y5cwna1fph
-
MD5
0fd989adc9c38b9c1763ad454191c767
-
SHA1
568d16b6900a57ec2e0cd99ff5c41dc02b6c77dc
-
SHA256
ab639a1a3e7e68b80571462ec402416d71dd76ae499ea96e937078ea42513be9
-
SHA512
01d4dc0453f7152eee0e3aa56389b437554f8db3a30e139245d252160b3b915ad0ee8e5d45173a93ae350d657882c25fba9a9b7ddafb53052b85829740045906
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nX6:vj+jsMQMOtEvwDpj5HczerLO04BV
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-21_0fd989adc9c38b9c1763ad454191c767_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-21_0fd989adc9c38b9c1763ad454191c767_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-21_0fd989adc9c38b9c1763ad454191c767_cryptolocker
-
Size
51KB
-
MD5
0fd989adc9c38b9c1763ad454191c767
-
SHA1
568d16b6900a57ec2e0cd99ff5c41dc02b6c77dc
-
SHA256
ab639a1a3e7e68b80571462ec402416d71dd76ae499ea96e937078ea42513be9
-
SHA512
01d4dc0453f7152eee0e3aa56389b437554f8db3a30e139245d252160b3b915ad0ee8e5d45173a93ae350d657882c25fba9a9b7ddafb53052b85829740045906
-
SSDEEP
768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr42A7n0FmB0nX6:vj+jsMQMOtEvwDpj5HczerLO04BV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-