Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-18_e299a2ba930db07ed7510258c4027d69_cryptolocker

  • Size

    31KB

  • Sample

    240118-3gn18sgbdn

  • MD5

    e299a2ba930db07ed7510258c4027d69

  • SHA1

    3bb16fb03b696da8712ceca0049f6791ce6d1621

  • SHA256

    2c8189bd5cd0b8b045af4655b729172653563ee566b62e66c83fcf610a27337f

  • SHA512

    e7d5c095593acf47f255fac513b649d140b7e0bc96b95273455336820ab0f08ad6b480096793144f8f619c7ed3bea061bd1950e8727fa41dcf5e7e82e66a014c

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMubY:bAvJCYOOvbRPDEgXRc+BA/bY

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_e299a2ba930db07ed7510258c4027d69_cryptolocker

    • Size

      31KB

    • MD5

      e299a2ba930db07ed7510258c4027d69

    • SHA1

      3bb16fb03b696da8712ceca0049f6791ce6d1621

    • SHA256

      2c8189bd5cd0b8b045af4655b729172653563ee566b62e66c83fcf610a27337f

    • SHA512

      e7d5c095593acf47f255fac513b649d140b7e0bc96b95273455336820ab0f08ad6b480096793144f8f619c7ed3bea061bd1950e8727fa41dcf5e7e82e66a014c

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMubY:bAvJCYOOvbRPDEgXRc+BA/bY

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks