Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-27_8d555654fedb33946d5f85b2bd3ae002_cryptolocker
-
Size
44KB
-
Sample
240927-kd32watdlm
-
MD5
8d555654fedb33946d5f85b2bd3ae002
-
SHA1
6a93a1860b2125fa363a2c7148ec9ba95ba3d774
-
SHA256
3d95c66b66e6ed212f78136dc342e0f276fdfa0e59067190384a116b9cc41cd5
-
SHA512
769f2dd05ff27f5a089aa4be554e08e51bc573da591204e654e0a95c6810ac3fa7251aef60e7efdaa13d5ec03dfda6d7b4e37169c943bcb3d68be314568da013
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WQS:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFA
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-27_8d555654fedb33946d5f85b2bd3ae002_cryptolocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-09-27_8d555654fedb33946d5f85b2bd3ae002_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-27_8d555654fedb33946d5f85b2bd3ae002_cryptolocker
-
Size
44KB
-
MD5
8d555654fedb33946d5f85b2bd3ae002
-
SHA1
6a93a1860b2125fa363a2c7148ec9ba95ba3d774
-
SHA256
3d95c66b66e6ed212f78136dc342e0f276fdfa0e59067190384a116b9cc41cd5
-
SHA512
769f2dd05ff27f5a089aa4be554e08e51bc573da591204e654e0a95c6810ac3fa7251aef60e7efdaa13d5ec03dfda6d7b4e37169c943bcb3d68be314568da013
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WQS:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-