Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-06_2edf56614e0cdfa2f291b15cbd8a4b71_cryptolocker
-
Size
86KB
-
Sample
241006-gdeshayalh
-
MD5
2edf56614e0cdfa2f291b15cbd8a4b71
-
SHA1
5123ca96b5a16d41cb5756ac37613390eb1efebb
-
SHA256
08cc85c59740ef5132a3a76671b1310a9277b80d0dbcddbe6b8d0850607b4ed6
-
SHA512
239b22725e639dc596c5714c26cd7dc36c95e26ae8d8b15f4fb1fb03aa50b6d5760f54f60bd37efa2b5a418f768d67b704749d6723f222c867109690ab774276
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsb:TCjsIOtEvwDpj5HE/OUHnSMX
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-06_2edf56614e0cdfa2f291b15cbd8a4b71_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-06_2edf56614e0cdfa2f291b15cbd8a4b71_cryptolocker.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-10-06_2edf56614e0cdfa2f291b15cbd8a4b71_cryptolocker
-
Size
86KB
-
MD5
2edf56614e0cdfa2f291b15cbd8a4b71
-
SHA1
5123ca96b5a16d41cb5756ac37613390eb1efebb
-
SHA256
08cc85c59740ef5132a3a76671b1310a9277b80d0dbcddbe6b8d0850607b4ed6
-
SHA512
239b22725e639dc596c5714c26cd7dc36c95e26ae8d8b15f4fb1fb03aa50b6d5760f54f60bd37efa2b5a418f768d67b704749d6723f222c867109690ab774276
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCsb:TCjsIOtEvwDpj5HE/OUHnSMX
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-