Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker
-
Size
36KB
-
Sample
241013-qt1vcatdrr
-
MD5
2fbc1b2faef038ad3e7917a65f2bc2c3
-
SHA1
0b885b35e4cba6761e93ff3a832b9c3fc632fde8
-
SHA256
eef905ae98a6791de6bbef7f9a7fdddfd53c6c9c4e9186c66009cd9c9ce50fa4
-
SHA512
8a7b71781eedadc622127830c0efe318a754c1490b848af631038d3f0fd24c071a049ebbdbd047ac7d09846f4cbdbdd8e917674005564aa9d281b8c9f9a27fb5
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1HO:btB9g/WItCSsAGjX7r3BPOMHocM4v+j
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-13_2fbc1b2faef038ad3e7917a65f2bc2c3_cryptolocker
-
Size
36KB
-
MD5
2fbc1b2faef038ad3e7917a65f2bc2c3
-
SHA1
0b885b35e4cba6761e93ff3a832b9c3fc632fde8
-
SHA256
eef905ae98a6791de6bbef7f9a7fdddfd53c6c9c4e9186c66009cd9c9ce50fa4
-
SHA512
8a7b71781eedadc622127830c0efe318a754c1490b848af631038d3f0fd24c071a049ebbdbd047ac7d09846f4cbdbdd8e917674005564aa9d281b8c9f9a27fb5
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B94IOMHo3sxP1HO:btB9g/WItCSsAGjX7r3BPOMHocM4v+j
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-