Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 05:57
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe
-
Size
29KB
-
MD5
3c84fdedf6d5182a25342f8ed672c5de
-
SHA1
8515c8461a140f35c7bef6f4d15ac9e904c98b87
-
SHA256
7430b266ca80664047ad8cc135ff0773bb86523ce0001ea4e74b3157cfa6864e
-
SHA512
fd85261aec3d460a7689cf3850376b522c10cafc26a298a991d92cb625c4f051405bd4acb4d0a07aacfacdfaa4e44716230ed7c80058536b47714718678a4ee6
-
SSDEEP
384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cuahd:bAvJCYOOvbRPDEgXRch
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_3c84fdedf6d5182a25342f8ed672c5de_cryptolocker.exe"1⤵PID:4676
-
C:\Users\Admin\AppData\Local\Temp\demka.exe"C:\Users\Admin\AppData\Local\Temp\demka.exe"2⤵PID:4036
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
29KB
MD5b546136f1d0088972ba80c2958a513f9
SHA19fdbf59700be88aa12cc5c6e21fd19307c4a9a9d
SHA25670191f56d8195f88839b7653a788c3d2cefff1c3c1ea558cec7d5d58f26897ca
SHA5120976204ba6629e3727537c43c86640e98e742317696f59e9dcf5c46b2d95a69be77667c69136917e6610a1c92045eee409f0b2117b79394c02ff64718714fd9e