Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2025-03-21_b35283ccdd867905443e8970b6557eef_cryptolocker
-
Size
20KB
-
Sample
250321-jx4bbayqy3
-
MD5
b35283ccdd867905443e8970b6557eef
-
SHA1
a9734c0d5c9f8cf74a11d6c3c5414df1cea67221
-
SHA256
d25f06530424d4f26135325c02c2f890d51b14171bb8eaff0c146e6004c22228
-
SHA512
965c57ef9b1f0dbc865479d02dd722a5beedd518597a9d5f451c687aa98c9f01ad1d6cf4bad918db97e54f2be871256e5dd10f8f314942f6f128e63f375cfe58
-
SSDEEP
384:xG8OlX7EG+2LEjwg8SD6SSFYDTujQAf+hoGaQwbqqTn:xGFD1L/g9BSFYe0iv1Tn
Behavioral task
behavioral1
Sample
2025-03-21_b35283ccdd867905443e8970b6557eef_cryptolocker.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
2025-03-21_b35283ccdd867905443e8970b6557eef_cryptolocker
-
Size
20KB
-
MD5
b35283ccdd867905443e8970b6557eef
-
SHA1
a9734c0d5c9f8cf74a11d6c3c5414df1cea67221
-
SHA256
d25f06530424d4f26135325c02c2f890d51b14171bb8eaff0c146e6004c22228
-
SHA512
965c57ef9b1f0dbc865479d02dd722a5beedd518597a9d5f451c687aa98c9f01ad1d6cf4bad918db97e54f2be871256e5dd10f8f314942f6f128e63f375cfe58
-
SSDEEP
384:xG8OlX7EG+2LEjwg8SD6SSFYDTujQAf+hoGaQwbqqTn:xGFD1L/g9BSFYe0iv1Tn
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-