Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-05_5c6e8d87014d3bc9013a8d651d59691c_cryptolocker
-
Size
51KB
-
Sample
241005-2b4ztsyhra
-
MD5
5c6e8d87014d3bc9013a8d651d59691c
-
SHA1
7f5298bf980e6f3043ea31229f33497fd4e94c5e
-
SHA256
d9906c5fcc5d6bb2d11e5175194731139aa14f2d7526c402f29e4e58ff2591c5
-
SHA512
5121eeeb14de45ba44309b3fe7068f1ac66508b1bcbc2430997f64f66a04ec71f0f47e59698323af91e50272783bf99b32318d527a62f7fde8ba68a0ef24dfb7
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsT4:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvI4
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-05_5c6e8d87014d3bc9013a8d651d59691c_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-05_5c6e8d87014d3bc9013a8d651d59691c_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-10-05_5c6e8d87014d3bc9013a8d651d59691c_cryptolocker
-
Size
51KB
-
MD5
5c6e8d87014d3bc9013a8d651d59691c
-
SHA1
7f5298bf980e6f3043ea31229f33497fd4e94c5e
-
SHA256
d9906c5fcc5d6bb2d11e5175194731139aa14f2d7526c402f29e4e58ff2591c5
-
SHA512
5121eeeb14de45ba44309b3fe7068f1ac66508b1bcbc2430997f64f66a04ec71f0f47e59698323af91e50272783bf99b32318d527a62f7fde8ba68a0ef24dfb7
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556BlvsT4:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvI4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-