Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    0s
  • max time network
    127s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/01/2024, 05:57

General

  • Target

    2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe

  • Size

    29KB

  • MD5

    3c84fdedf6d5182a25342f8ed672c5de

  • SHA1

    8515c8461a140f35c7bef6f4d15ac9e904c98b87

  • SHA256

    7430b266ca80664047ad8cc135ff0773bb86523ce0001ea4e74b3157cfa6864e

  • SHA512

    fd85261aec3d460a7689cf3850376b522c10cafc26a298a991d92cb625c4f051405bd4acb4d0a07aacfacdfaa4e44716230ed7c80058536b47714718678a4ee6

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuahd:bAvJCYOOvbRPDEgXRch

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe"
    1⤵
      PID:4676
      • C:\Users\Admin\AppData\Local\Temp\demka.exe
        "C:\Users\Admin\AppData\Local\Temp\demka.exe"
        2⤵
          PID:4036

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\demka.exe

        Filesize

        29KB

        MD5

        b546136f1d0088972ba80c2958a513f9

        SHA1

        9fdbf59700be88aa12cc5c6e21fd19307c4a9a9d

        SHA256

        70191f56d8195f88839b7653a788c3d2cefff1c3c1ea558cec7d5d58f26897ca

        SHA512

        0976204ba6629e3727537c43c86640e98e742317696f59e9dcf5c46b2d95a69be77667c69136917e6610a1c92045eee409f0b2117b79394c02ff64718714fd9e

      • memory/4036-25-0x0000000000520000-0x0000000000526000-memory.dmp

        Filesize

        24KB

      • memory/4676-0-0x0000000002EA0000-0x0000000002EA6000-memory.dmp

        Filesize

        24KB

      • memory/4676-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/4676-1-0x0000000002EA0000-0x0000000002EA6000-memory.dmp

        Filesize

        24KB