Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-10_4227d7fd4ea4c89fa20010c0aba8e3ef_cryptolocker
-
Size
38KB
-
Sample
241010-kcnksssbma
-
MD5
4227d7fd4ea4c89fa20010c0aba8e3ef
-
SHA1
3781556565e1b0b66c3b2c8cb760f28bffc925bc
-
SHA256
a6ebcd5adf5a393ddb0b2eaa4607c37d4e1ac0693e6717dfebdb48805134a79d
-
SHA512
52477e36b663679b0cf140ab3c8648075ea46869a834b8e841a2a8d155648c1dea3b665465506d118102d6be2355e260ca7d040babffadbae27dce7b3c643ce8
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3hn:qUmnpomddpMOtEvwDpjjaYaQhn
Behavioral task
behavioral1
Sample
2024-10-10_4227d7fd4ea4c89fa20010c0aba8e3ef_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2024-10-10_4227d7fd4ea4c89fa20010c0aba8e3ef_cryptolocker
-
Size
38KB
-
MD5
4227d7fd4ea4c89fa20010c0aba8e3ef
-
SHA1
3781556565e1b0b66c3b2c8cb760f28bffc925bc
-
SHA256
a6ebcd5adf5a393ddb0b2eaa4607c37d4e1ac0693e6717dfebdb48805134a79d
-
SHA512
52477e36b663679b0cf140ab3c8648075ea46869a834b8e841a2a8d155648c1dea3b665465506d118102d6be2355e260ca7d040babffadbae27dce7b3c643ce8
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axK3hn:qUmnpomddpMOtEvwDpjjaYaQhn
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-