Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-30_b4f5ffdd1c15863038e86116accaf458_cryptolocker
-
Size
35KB
-
Sample
240930-d6bprswcqm
-
MD5
b4f5ffdd1c15863038e86116accaf458
-
SHA1
7a4507950ef033fd9af84cf134ca6e9b0eb301d1
-
SHA256
c5124c53041f396abb1061767de1d88b76563f2f2f8696236603977b7af8623f
-
SHA512
e5c2fdcd3f83726637b50ae2a6173c9ad9b87b275255aacf674a32b1ddb6fd04e0bc03e4dfb50f2ae3c8ee91c452f5e95a2be1bf960b1f3850a96955391a9dc8
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3Sj:bG74zYcgT/Ekd0ryfjkbCj
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_b4f5ffdd1c15863038e86116accaf458_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-30_b4f5ffdd1c15863038e86116accaf458_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-30_b4f5ffdd1c15863038e86116accaf458_cryptolocker
-
Size
35KB
-
MD5
b4f5ffdd1c15863038e86116accaf458
-
SHA1
7a4507950ef033fd9af84cf134ca6e9b0eb301d1
-
SHA256
c5124c53041f396abb1061767de1d88b76563f2f2f8696236603977b7af8623f
-
SHA512
e5c2fdcd3f83726637b50ae2a6173c9ad9b87b275255aacf674a32b1ddb6fd04e0bc03e4dfb50f2ae3c8ee91c452f5e95a2be1bf960b1f3850a96955391a9dc8
-
SSDEEP
384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXvJF3Sj:bG74zYcgT/Ekd0ryfjkbCj
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-