Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-25_56a2680264a0d3eceda93006e4b4f057_cryptolocker
-
Size
32KB
-
Sample
240925-x2x7rawdqh
-
MD5
56a2680264a0d3eceda93006e4b4f057
-
SHA1
4c5dd8bcbbc66abfa3bd11ee75a59484fb0bcfb6
-
SHA256
cbf5cefca72df299861e18f773d31bc363fe7e79533284f609fd14086c3a9ddf
-
SHA512
d4e45eb0b13dba4d9ca2a44b1946bef23f575ab6f460c159f65102dae26ec2d3b788e4bee7939009433ea4e40d82ada6f21e358e4025b93e7a9e27c838d23f1d
-
SSDEEP
384:bgCOR4uGLLQRcsdeQ72ngEUKK7YmE8jI0nrlwfjDU5ynuKKiqyE:bgCS4zYcgT/ENr0ryfjGquKKiZE
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-25_56a2680264a0d3eceda93006e4b4f057_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-25_56a2680264a0d3eceda93006e4b4f057_cryptolocker.exe
Resource
win10v2004-20240910-en
Malware Config
Targets
-
-
Target
2024-09-25_56a2680264a0d3eceda93006e4b4f057_cryptolocker
-
Size
32KB
-
MD5
56a2680264a0d3eceda93006e4b4f057
-
SHA1
4c5dd8bcbbc66abfa3bd11ee75a59484fb0bcfb6
-
SHA256
cbf5cefca72df299861e18f773d31bc363fe7e79533284f609fd14086c3a9ddf
-
SHA512
d4e45eb0b13dba4d9ca2a44b1946bef23f575ab6f460c159f65102dae26ec2d3b788e4bee7939009433ea4e40d82ada6f21e358e4025b93e7a9e27c838d23f1d
-
SSDEEP
384:bgCOR4uGLLQRcsdeQ72ngEUKK7YmE8jI0nrlwfjDU5ynuKKiqyE:bgCS4zYcgT/ENr0ryfjGquKKiZE
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-