Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1s
  • max time network
    78s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 06:45

General

  • Target

    2024-01-08_9d5cfa442b3f7ef882dda4b2aa0819d5_cryptolocker.exe

  • Size

    40KB

  • MD5

    9d5cfa442b3f7ef882dda4b2aa0819d5

  • SHA1

    b59543e46b9050afaac1fd75ab8e6885cbe4dbac

  • SHA256

    04ee9c396f45d4dbcfd0631cf0a0d064205a81252f149ffbf4f07256c715ca4e

  • SHA512

    6db3eb04e021cb51a7b09dd48ca1deb36791b649d880f97892a07ea0daa185ac53792c6eb3285798ea564f3d4db02be5b68838afc524ced72ecdbde8c8c185bd

  • SSDEEP

    768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kxh:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XI

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-08_9d5cfa442b3f7ef882dda4b2aa0819d5_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-08_9d5cfa442b3f7ef882dda4b2aa0819d5_cryptolocker.exe"
    1⤵
      PID:1332
      • C:\Users\Admin\AppData\Local\Temp\hurok.exe
        "C:\Users\Admin\AppData\Local\Temp\hurok.exe"
        2⤵
          PID:3260

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\hurok.exe

        Filesize

        40KB

        MD5

        18d3ee5d98a3850b8a6ee1d96edc461c

        SHA1

        490f1540b40058a0ce0e5224dd845d1cdc90cdd5

        SHA256

        2f29bccd5aaf27c1fc3f58b78873cee619c0680fd8732d3501a7cc0957dce965

        SHA512

        60eebd026e49aca11a379f28ea79f3626234279af6ab59c139dfe9b599fc22d94b605811f41934acd3b5e67e6be267793935b821b13a68899fda167bc9cb24df

      • memory/1332-1-0x0000000002270000-0x0000000002276000-memory.dmp

        Filesize

        24KB

      • memory/1332-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/1332-0-0x0000000002270000-0x0000000002276000-memory.dmp

        Filesize

        24KB

      • memory/3260-20-0x0000000002040000-0x0000000002046000-memory.dmp

        Filesize

        24KB