Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-09-30_1b823cd86cb92058c964fdd8f6edf477_cryptolocker
-
Size
41KB
-
Sample
240930-r2zspa1amr
-
MD5
1b823cd86cb92058c964fdd8f6edf477
-
SHA1
7af58af0c39d4e1135290b11d56ffc3bfd5fcc70
-
SHA256
7c164bf477f151ed6f3c3cbc94cfd4dbb83f773ff555b6cbe9429666750bbc49
-
SHA512
3466e6f24c9a0d547b918811543863fc8013cad14659b9e219ac4efd15450ca0bda18b51970d537b6c4f526f45f3fdb9a5dbd94b468febb7714d3fb5aab66c5e
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZMm:bxNrC7kYo1Fxf3s05rwxbFU
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-30_1b823cd86cb92058c964fdd8f6edf477_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-30_1b823cd86cb92058c964fdd8f6edf477_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-09-30_1b823cd86cb92058c964fdd8f6edf477_cryptolocker
-
Size
41KB
-
MD5
1b823cd86cb92058c964fdd8f6edf477
-
SHA1
7af58af0c39d4e1135290b11d56ffc3bfd5fcc70
-
SHA256
7c164bf477f151ed6f3c3cbc94cfd4dbb83f773ff555b6cbe9429666750bbc49
-
SHA512
3466e6f24c9a0d547b918811543863fc8013cad14659b9e219ac4efd15450ca0bda18b51970d537b6c4f526f45f3fdb9a5dbd94b468febb7714d3fb5aab66c5e
-
SSDEEP
768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqZMm:bxNrC7kYo1Fxf3s05rwxbFU
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-