Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 05:43
Behavioral task
behavioral1
Sample
2024-01-01_5f0a6afa1e20ff2f385e2311c6aa5541_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_5f0a6afa1e20ff2f385e2311c6aa5541_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-01_5f0a6afa1e20ff2f385e2311c6aa5541_cryptolocker.exe
-
Size
60KB
-
MD5
5f0a6afa1e20ff2f385e2311c6aa5541
-
SHA1
cb542d2dff19eec386b6c7f81be80d42d35c0077
-
SHA256
841020ab9bd7d3c4439914d49e6de81a4c107de31f677712d16ae9a6c8249dd0
-
SHA512
54c556e3d0b46e3987af025fe9ab7bb92870cc3c32cc20f718b7ce668490c15cc764b9cae41c49670a4387f1475105081214a8c4d3cffb3dd20b6e29d9cfc521
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLUWL:zj+soPSMOtEvwDpj4kpmeLm5
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2656-0-0x0000000000500000-0x0000000000510000-memory.dmp upx behavioral2/memory/2656-17-0x0000000000500000-0x0000000000510000-memory.dmp upx behavioral2/memory/764-50-0x0000000000500000-0x0000000000510000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_5f0a6afa1e20ff2f385e2311c6aa5541_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_5f0a6afa1e20ff2f385e2311c6aa5541_cryptolocker.exe"1⤵PID:2656
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵PID:764
-