Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-03_2d874084a453909644ff4cf3f4bde989_cryptolocker
-
Size
62KB
-
Sample
241003-e2cxpsvbmj
-
MD5
2d874084a453909644ff4cf3f4bde989
-
SHA1
5f396e7b7dc8d9c18b9ef885f3eb85bba0a6e6a6
-
SHA256
ad5d6a88ced1d7fb83c0553c8b87855daf99b0f84cc517c21caa2efc186c9b40
-
SHA512
de3392913a902dcc9975636fd8bd546b3dc676a7044f31a0fe79382d29040efedd9f2d037b72381a3133d74aa15ee9f4c15c057dc98d71bf88a64466e5b5ad8c
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP3qh/:H6QFElP6n+gou9cvMOtEvwDpjCpVXhh/
Behavioral task
behavioral1
Sample
2024-10-03_2d874084a453909644ff4cf3f4bde989_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-10-03_2d874084a453909644ff4cf3f4bde989_cryptolocker
-
Size
62KB
-
MD5
2d874084a453909644ff4cf3f4bde989
-
SHA1
5f396e7b7dc8d9c18b9ef885f3eb85bba0a6e6a6
-
SHA256
ad5d6a88ced1d7fb83c0553c8b87855daf99b0f84cc517c21caa2efc186c9b40
-
SHA512
de3392913a902dcc9975636fd8bd546b3dc676a7044f31a0fe79382d29040efedd9f2d037b72381a3133d74aa15ee9f4c15c057dc98d71bf88a64466e5b5ad8c
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP3qh/:H6QFElP6n+gou9cvMOtEvwDpjCpVXhh/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-