Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-10-18_58f25af776df27a0fe3a0d761301db69_cryptolocker
-
Size
23KB
-
Sample
241018-f5r2gasgll
-
MD5
58f25af776df27a0fe3a0d761301db69
-
SHA1
7d777ed080de43f645d303376051c26ad75ae373
-
SHA256
b40d984a85748f4f32a11146fa1e4a94ff88be3b6995b3138a13a651272817c1
-
SHA512
0b1c908c824a8bfe6ea48bee788d7eb38f51e19da5f9b4101f204bcfd63417967c7ddfcdd01a4d296ac12fe6fd6e1ef5802cd89864a3d539a078ca1660425f53
-
SSDEEP
384:CBOkkLPcM4JIM39ZR8Z87XHjeKtEEue+63BYp2tOOtEvwDpjqIGRFQ:CB19M4JIhZMHSKtweHBrtOOtEvwDpjKQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-18_58f25af776df27a0fe3a0d761301db69_cryptolocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-18_58f25af776df27a0fe3a0d761301db69_cryptolocker.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
2024-10-18_58f25af776df27a0fe3a0d761301db69_cryptolocker
-
Size
23KB
-
MD5
58f25af776df27a0fe3a0d761301db69
-
SHA1
7d777ed080de43f645d303376051c26ad75ae373
-
SHA256
b40d984a85748f4f32a11146fa1e4a94ff88be3b6995b3138a13a651272817c1
-
SHA512
0b1c908c824a8bfe6ea48bee788d7eb38f51e19da5f9b4101f204bcfd63417967c7ddfcdd01a4d296ac12fe6fd6e1ef5802cd89864a3d539a078ca1660425f53
-
SSDEEP
384:CBOkkLPcM4JIM39ZR8Z87XHjeKtEEue+63BYp2tOOtEvwDpjqIGRFQ:CB19M4JIhZMHSKtweHBrtOOtEvwDpjKQ
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-