Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 05:59
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_5d71437166ce82fe43b8c671f0b0c382_cryptolocker.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-11_5d71437166ce82fe43b8c671f0b0c382_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-11_5d71437166ce82fe43b8c671f0b0c382_cryptolocker.exe
-
Size
93KB
-
MD5
5d71437166ce82fe43b8c671f0b0c382
-
SHA1
5f876e4872c649d3e3b51126e38106961fdbeec2
-
SHA256
56951b71ee7700affcdb5b59d3a0c5b1fc9ca9542d4f094dbc14def52d7fc585
-
SHA512
02713bb4bc1d7813bf0cde04719de84aa40baeefc0a7c595fe10a50c65bdc200567f9a1d26ba1089f778b88c922ee7e927c42d418fa51e6c65212eebaef82c6b
-
SSDEEP
1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCN:26a+2OtEvwDpjtza
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_5d71437166ce82fe43b8c671f0b0c382_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_5d71437166ce82fe43b8c671f0b0c382_cryptolocker.exe"1⤵PID:1532
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵PID:1344
-