Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    126s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 05:59

General

  • Target

    2024-01-09_a8ff2cede9752436e03ede89c806bddb_cryptolocker.exe

  • Size

    41KB

  • MD5

    a8ff2cede9752436e03ede89c806bddb

  • SHA1

    2e8d6eea07c1cef7ea8cc0c9c293b8c2d5bd92d5

  • SHA256

    ae185cf618f1e9b09faa82f716f646c469f356752ea40af58baa15ca10c6ead6

  • SHA512

    c9f34b31416fce5b46e508f9c53b4aeba0140b78b03aac5eb4f5ecc1a8b96db32c48fce550aa0e17c85173151e8507229a72e657d038358e5165b613554452db

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCMB:79inqyNR/QtOOtEvwDpjBKccJVODvym

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-09_a8ff2cede9752436e03ede89c806bddb_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-09_a8ff2cede9752436e03ede89c806bddb_cryptolocker.exe"
    1⤵
      PID:4064
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:2228

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/2228-20-0x00000000007D0000-0x00000000007D6000-memory.dmp

        Filesize

        24KB

      • memory/2228-26-0x00000000007B0000-0x00000000007B6000-memory.dmp

        Filesize

        24KB

      • memory/2228-17-0x0000000000500000-0x000000000050F000-memory.dmp

        Filesize

        60KB

      • memory/4064-0-0x0000000000500000-0x000000000050F000-memory.dmp

        Filesize

        60KB

      • memory/4064-3-0x0000000002230000-0x0000000002236000-memory.dmp

        Filesize

        24KB

      • memory/4064-2-0x0000000002210000-0x0000000002216000-memory.dmp

        Filesize

        24KB

      • memory/4064-1-0x0000000002210000-0x0000000002216000-memory.dmp

        Filesize

        24KB

      • memory/4064-18-0x0000000000500000-0x000000000050F000-memory.dmp

        Filesize

        60KB