Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe
-
Size
34KB
-
MD5
e4f1aa58cb9e1f2983a8d61241518954
-
SHA1
b2d32cd642563719da21e4d32bd55513c420aa6a
-
SHA256
acc2a8b84b261511de247ab64c5c1242fcbf5102f8dc9128a3cde0d71c570aac
-
SHA512
793505a3b2f781b38fef9b1d68b4efe0b829e4fc88a45b4ad308a97051e37d4465145c240448a3dc531d8ab95f7fb547c189de245e1ab04ab239e5e185007d4f
-
SSDEEP
384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0J5+:btB9g/WItCSsAGjX7e9NQM
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe"1⤵PID:1868
-
C:\Users\Admin\AppData\Local\Temp\gewos.exe"C:\Users\Admin\AppData\Local\Temp\gewos.exe"2⤵PID:4988
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
34KB
MD50b82d32126e566d026353be4fd8aecc3
SHA1a71c7ff37d4513008d203533f29205d6aeeef556
SHA25636eb2755a70b7c4943e3ec625c3db2bc8b4422cde47fed1dde92db1e6de6defb
SHA512528fbc6c6f8209f8ced2f272b53785fc1f8969dc07e7845cc7a1e8f85d625e22c41e688c3055567f3ca2ee3e00576f8a3720f5077150fd797e2a9208aaecfb53