Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker
-
Size
48KB
-
Sample
241010-gff4cayfkb
-
MD5
eb840ead21f8c02b8cf3929418921b05
-
SHA1
0d1293f850050e5966763e046af2febb11dccd29
-
SHA256
f0cfdcb49b125d9c38b605424e08046a6a69954ed7637cf8ffae2218bd50cf4e
-
SHA512
748c446c5ff576be4f0e40b297b9d0eb6545736eeab0f0fcc5ad082ba7cffafd7dcbebd68b1daf0be2c998d79cd04d30c26495aae9f0e9494723a0384d851411
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAz:P6QFElP6k+MRQMOtEvwDpjBQpVX8Az
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-10_eb840ead21f8c02b8cf3929418921b05_cryptolocker
-
Size
48KB
-
MD5
eb840ead21f8c02b8cf3929418921b05
-
SHA1
0d1293f850050e5966763e046af2febb11dccd29
-
SHA256
f0cfdcb49b125d9c38b605424e08046a6a69954ed7637cf8ffae2218bd50cf4e
-
SHA512
748c446c5ff576be4f0e40b297b9d0eb6545736eeab0f0fcc5ad082ba7cffafd7dcbebd68b1daf0be2c998d79cd04d30c26495aae9f0e9494723a0384d851411
-
SSDEEP
768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPlAz:P6QFElP6k+MRQMOtEvwDpjBQpVX8Az
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-