Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-05_27a45887bb55291fec9544cd8078e510_cryptolocker
-
Size
26KB
-
Sample
241005-d16b7asgnl
-
MD5
27a45887bb55291fec9544cd8078e510
-
SHA1
2b49cea04515e6d527cd97ae8e3616d61fe3632c
-
SHA256
955b2e55fdae11bc1557c376a67e5b61033713298affbd550a568c93ecfddecd
-
SHA512
1b94a9fc8d6556eab9f134121fbb982f089b4d14acd3e4666cee9471de84937e1776e386eb93fc973ed59e17441657c4666880a645e36d25832c2dcf55594227
-
SSDEEP
384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMmHBdat:bVCPwFRo6CpwXFXSqQXfjAsmHBdE
Behavioral task
behavioral1
Sample
2024-10-05_27a45887bb55291fec9544cd8078e510_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-10-05_27a45887bb55291fec9544cd8078e510_cryptolocker
-
Size
26KB
-
MD5
27a45887bb55291fec9544cd8078e510
-
SHA1
2b49cea04515e6d527cd97ae8e3616d61fe3632c
-
SHA256
955b2e55fdae11bc1557c376a67e5b61033713298affbd550a568c93ecfddecd
-
SHA512
1b94a9fc8d6556eab9f134121fbb982f089b4d14acd3e4666cee9471de84937e1776e386eb93fc973ed59e17441657c4666880a645e36d25832c2dcf55594227
-
SSDEEP
384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMmHBdat:bVCPwFRo6CpwXFXSqQXfjAsmHBdE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-