Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-18_295cf4d26e1171b5d8de0b7ccc4e7bc6_cryptolocker
-
Size
79KB
-
Sample
241018-d37yssxfll
-
MD5
295cf4d26e1171b5d8de0b7ccc4e7bc6
-
SHA1
57224da8fbf03d6a16d72cd3c8b02e5ab9cef45d
-
SHA256
ab0168b60655c99acbb3005b0d804284a7ed18afd53cccc6ff8e8f7be905de3e
-
SHA512
d65eae32e9fe4f9535dc73d6fc96ec302c3f4ce4ae5daaea5165b4ac139653a4621157986b28ba1c5095e36d6ee74362b2907c64d3d04a910266fa0c53305489
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUx4:T6a+rdOOtEvwDpjNtHPH
Behavioral task
behavioral1
Sample
2024-10-18_295cf4d26e1171b5d8de0b7ccc4e7bc6_cryptolocker.exe
Resource
win7-20240708-en
Malware Config
Targets
-
-
Target
2024-10-18_295cf4d26e1171b5d8de0b7ccc4e7bc6_cryptolocker
-
Size
79KB
-
MD5
295cf4d26e1171b5d8de0b7ccc4e7bc6
-
SHA1
57224da8fbf03d6a16d72cd3c8b02e5ab9cef45d
-
SHA256
ab0168b60655c99acbb3005b0d804284a7ed18afd53cccc6ff8e8f7be905de3e
-
SHA512
d65eae32e9fe4f9535dc73d6fc96ec302c3f4ce4ae5daaea5165b4ac139653a4621157986b28ba1c5095e36d6ee74362b2907c64d3d04a910266fa0c53305489
-
SSDEEP
1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUx4:T6a+rdOOtEvwDpjNtHPH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-