Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    134s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/01/2024, 06:49

General

  • Target

    2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe

  • Size

    34KB

  • MD5

    e4f1aa58cb9e1f2983a8d61241518954

  • SHA1

    b2d32cd642563719da21e4d32bd55513c420aa6a

  • SHA256

    acc2a8b84b261511de247ab64c5c1242fcbf5102f8dc9128a3cde0d71c570aac

  • SHA512

    793505a3b2f781b38fef9b1d68b4efe0b829e4fc88a45b4ad308a97051e37d4465145c240448a3dc531d8ab95f7fb547c189de245e1ab04ab239e5e185007d4f

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0J5+:btB9g/WItCSsAGjX7e9NQM

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-08_e4f1aa58cb9e1f2983a8d61241518954_cryptolocker.exe"
    1⤵
      PID:1868
      • C:\Users\Admin\AppData\Local\Temp\gewos.exe
        "C:\Users\Admin\AppData\Local\Temp\gewos.exe"
        2⤵
          PID:4988

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\gewos.exe

        Filesize

        34KB

        MD5

        0b82d32126e566d026353be4fd8aecc3

        SHA1

        a71c7ff37d4513008d203533f29205d6aeeef556

        SHA256

        36eb2755a70b7c4943e3ec625c3db2bc8b4422cde47fed1dde92db1e6de6defb

        SHA512

        528fbc6c6f8209f8ced2f272b53785fc1f8969dc07e7845cc7a1e8f85d625e22c41e688c3055567f3ca2ee3e00576f8a3720f5077150fd797e2a9208aaecfb53

      • memory/1868-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/1868-1-0x0000000002350000-0x0000000002356000-memory.dmp

        Filesize

        24KB

      • memory/1868-0-0x0000000002350000-0x0000000002356000-memory.dmp

        Filesize

        24KB

      • memory/4988-25-0x0000000002210000-0x0000000002216000-memory.dmp

        Filesize

        24KB