Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    88s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 05:37

General

  • Target

    2024-01-01_07df902ddda52b3f25c0f6caf76c6040_cryptolocker.exe

  • Size

    35KB

  • MD5

    07df902ddda52b3f25c0f6caf76c6040

  • SHA1

    f3c9047184913368f45360c99b3dd81d9e7d5b70

  • SHA256

    60a83fcf1f905c3513fbb463e30c8c81f341b3315ed0b001e3b2453343910857

  • SHA512

    73495f15fd83e4795d8e2f3bff218ce7750e652238d9b8b3ec044b41d95ae450afadd3d7bd53f1afe99c5f1f02a2392bd9fc83c7ec98bc1e3338ba791bf72f16

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7Dtx:X6QFElP6n+gJQMOtEvwDpjBmzDD

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_07df902ddda52b3f25c0f6caf76c6040_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_07df902ddda52b3f25c0f6caf76c6040_cryptolocker.exe"
    1⤵
      PID:3560
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:2408

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        13KB

        MD5

        d68fe38a10f79a798c839ed20d5304d1

        SHA1

        caeb1971eb8c1e5e3c6aa690151acbdfae08304f

        SHA256

        e81b18145c565581b9809cdd528b218224e61d95a7e69ee13e1bf7f2dab28e67

        SHA512

        8e6e1e00aee1a4bd24474146b9420a6681bf26bc2c73c5a24dfba91abf7558a92d0a7d81cb8dc69c848f4d360fa59faa428c3fe338174479e9de4cb7aac51f9e

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        35KB

        MD5

        674e73241ab14593034c544105e52555

        SHA1

        f28dec141555bcccc59962670f1e786d02842145

        SHA256

        49184d2fcbe7bc3235d109f7d60b4396922efb357a0169a1a922ab8601097778

        SHA512

        c378f85a49f0556986b8fa2e2176794f9fe0632e9b495591ea21c10af2de4805bfd2eaf1bbf2483ec8609a4d317927bcd11fe6deb4ca89dc24be3c51fb2ae661

      • memory/2408-23-0x0000000000670000-0x0000000000676000-memory.dmp

        Filesize

        24KB

      • memory/2408-17-0x00000000006A0000-0x00000000006A6000-memory.dmp

        Filesize

        24KB

      • memory/3560-2-0x0000000000660000-0x0000000000666000-memory.dmp

        Filesize

        24KB

      • memory/3560-1-0x0000000000640000-0x0000000000646000-memory.dmp

        Filesize

        24KB

      • memory/3560-0-0x0000000000640000-0x0000000000646000-memory.dmp

        Filesize

        24KB