Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
20s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 05:45
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe
-
Size
41KB
-
MD5
80193361f8eb17ca96007aa778d470a7
-
SHA1
478ee6a11df47b037b63f72aae8bc4339cad977a
-
SHA256
9703b362caf1b570eda5d86f79359935d4a4d5e1eaf378d23fc6fe2e346f51ad
-
SHA512
f497969f9160d8c0d899b054f94b390d981f0b218e2c1676fa59ab50f8b92ed167dbab7928690ed2c9c82bb2eb566db0b78e7d07a677b0f83fc21c857b3c0ca9
-
SSDEEP
384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5cG:79inqyNR/QtOOtEvwDpjBKccJVODvcG
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe"1⤵PID:916
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵PID:1812
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42KB
MD589bef6794943946443bf0ac52507f86a
SHA1b66e885ea71f557d3f5208e52371b6f744e0f8d9
SHA256d9cb0029f587328ed3a6132f07b095a500aa01d3920e8d6ceaa9d3e2c2103645
SHA5122f1c39a1d507f29d9ef1177d7cce0cfe9f7ebbd9d955493c127832eaa59ea5525e1ad6731cca66fd157f342b664c00834f67e207887dd21a4fc379839e97b9a0
-
Filesize
33KB
MD5116adfe978d6e7032a73b7add1363c64
SHA142cb2a23a9b5cc3f055297335801963d472221ca
SHA256d7bed0ab533e0dd9799fbfc1059314dbbf3ed3a80c85a2309b6fdfad312d9287
SHA512574aa96f45aa5396908591777052da2d58633347dc004a3073dcf6e9d8a4a2569cdbe698759023b350452ffc0bdb58e61fc1ad9745dc7e53dc7cf9f748ff3d67