Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-06_dd0a0bc8e49cf6a2cc8c975685f3167f_cryptolocker
-
Size
40KB
-
Sample
241006-br98nsyelr
-
MD5
dd0a0bc8e49cf6a2cc8c975685f3167f
-
SHA1
b964639c02d078ae8e17b71921d777371eacb3f2
-
SHA256
e2e322c0457fc159a766450f4f03b5f049a2fbe1043912758f4df589dd9d2088
-
SHA512
46c7a014eed716db6fd201d609a8d9c08d5ec64f5dfd329eaf4400b74da57259a2f6aa5804ac3cc8b75e5c99f25f9401cee925cabfc73afc1e7bc8b0c7173704
-
SSDEEP
768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRiH:qTJu9cvMOtEvwDpjppVXzRi
Behavioral task
behavioral1
Sample
2024-10-06_dd0a0bc8e49cf6a2cc8c975685f3167f_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-10-06_dd0a0bc8e49cf6a2cc8c975685f3167f_cryptolocker
-
Size
40KB
-
MD5
dd0a0bc8e49cf6a2cc8c975685f3167f
-
SHA1
b964639c02d078ae8e17b71921d777371eacb3f2
-
SHA256
e2e322c0457fc159a766450f4f03b5f049a2fbe1043912758f4df589dd9d2088
-
SHA512
46c7a014eed716db6fd201d609a8d9c08d5ec64f5dfd329eaf4400b74da57259a2f6aa5804ac3cc8b75e5c99f25f9401cee925cabfc73afc1e7bc8b0c7173704
-
SSDEEP
768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRiH:qTJu9cvMOtEvwDpjppVXzRi
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-