Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-13_3640e95037cdd20d319fa100f27c6b65_cryptolocker
-
Size
55KB
-
Sample
241013-kbqzjaxana
-
MD5
3640e95037cdd20d319fa100f27c6b65
-
SHA1
d0f4b0aae610aa0f3a7176a74938ef73111317e7
-
SHA256
1224662dcaeb7a42168f299846b41379e060e6049f28c8ea15d6e4998f0c111b
-
SHA512
5769ec3c5789f5bafc04141f31e00db145c4838cbf910cbbf22c0ebb62a6b2e1411a6136e219f36375fd433f099a9fbd9ba08f2dc3ea306e3f6e2d9ec8acfd09
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIwj:X6QFElP6n+gJBMOtEvwDpjBtExmld
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-13_3640e95037cdd20d319fa100f27c6b65_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-13_3640e95037cdd20d319fa100f27c6b65_cryptolocker.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-13_3640e95037cdd20d319fa100f27c6b65_cryptolocker
-
Size
55KB
-
MD5
3640e95037cdd20d319fa100f27c6b65
-
SHA1
d0f4b0aae610aa0f3a7176a74938ef73111317e7
-
SHA256
1224662dcaeb7a42168f299846b41379e060e6049f28c8ea15d6e4998f0c111b
-
SHA512
5769ec3c5789f5bafc04141f31e00db145c4838cbf910cbbf22c0ebb62a6b2e1411a6136e219f36375fd433f099a9fbd9ba08f2dc3ea306e3f6e2d9ec8acfd09
-
SSDEEP
768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIwj:X6QFElP6n+gJBMOtEvwDpjBtExmld
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-