Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
10/01/2024, 05:55
General
-
Target
2024-01-09_6f6dc71b510cbe7af6e285bd5285e928_cryptolocker.exe
-
Size
38KB
-
MD5
6f6dc71b510cbe7af6e285bd5285e928
-
SHA1
5c2070b606e0522e30ce05fcad623b9544bbaccd
-
SHA256
400ccb3c8238e14f64e26fa1bba9d5a970aafa98b9b7f7e96090ae7fa8665951
-
SHA512
ab07f9cab47cc4640c69b4f95cbcc5f88b304815f62306b86092c7074c651b950819d09b6d60a5b7f471343294e8b480bed3e396fbd71487933851691cbede42
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+rXS:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+ri
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-09_6f6dc71b510cbe7af6e285bd5285e928_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-09_6f6dc71b510cbe7af6e285bd5285e928_cryptolocker.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\hasfj.exe"C:\Users\Admin\AppData\Local\Temp\hasfj.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
38KB
MD595a70e8c9f545b7a85ee16b9b95760ec
SHA1478b8d76b01236b8a649e1a9ff3bfbe96702a39d
SHA256cce0ac97ff2cda45ba583d9eaead96cdbbf1f1abfa61f90f848bf68571997998
SHA512842cb415ba1455f64cbb0d388f833a7cdda3c9346c0021207487a7960efe9c39838c3e8f78aa0af327c11877e19dd94f8df155f8ff6c208024598022895fc3f1
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB