Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-03_673762a86235e4202f484dd1050264d8_cryptolocker
-
Size
48KB
-
Sample
241003-czsh9stfkb
-
MD5
673762a86235e4202f484dd1050264d8
-
SHA1
d49600347a3d392dcd7da43e3757c6152b6c9a38
-
SHA256
a12d4633bd3ddb836e5d1680b5c33d57d8676b2f903ece53cf0858ab3babc274
-
SHA512
f487da542b3afdcc718a5c8f62adb57f99b5d2c26339b96c0ac1efd1966a0f03bd0bd94b2a018c9ee10b4386deb7fcad697550f09442a7f9928e668f5ed29aef
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Z55:79mqyNhQMOtEvwDpjBzckqX5
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-03_673762a86235e4202f484dd1050264d8_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-03_673762a86235e4202f484dd1050264d8_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-10-03_673762a86235e4202f484dd1050264d8_cryptolocker
-
Size
48KB
-
MD5
673762a86235e4202f484dd1050264d8
-
SHA1
d49600347a3d392dcd7da43e3757c6152b6c9a38
-
SHA256
a12d4633bd3ddb836e5d1680b5c33d57d8676b2f903ece53cf0858ab3babc274
-
SHA512
f487da542b3afdcc718a5c8f62adb57f99b5d2c26339b96c0ac1efd1966a0f03bd0bd94b2a018c9ee10b4386deb7fcad697550f09442a7f9928e668f5ed29aef
-
SSDEEP
768:79inqyNR/QtOOtEvwDpjBKccJVODvy3Z55:79mqyNhQMOtEvwDpjBzckqX5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-