Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-18...er.exe

windows7-x64

9

2024-01-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-18_e7879af574ab7f40639b5957e49e1041_cryptolocker

  • Size

    42KB

  • Sample

    240118-3heh7agcbl

  • MD5

    e7879af574ab7f40639b5957e49e1041

  • SHA1

    e71a4dacdec57a475cefba38d94691122157cbda

  • SHA256

    8c5331fc1e5b9971da1545a4e1409bb95028760e748ed0bc3eecd2dfd36d9073

  • SHA512

    96899b116788b5b6e70e97ab0d9ec1d930d3d82fbe6d243a93cb07ab57b04964c9594e98f48c4a633dbc8ba64c74612009c3f88519a750d7f751796c41def257

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66nkp6z:vj+jsMQMOtEvwDpj5HW5IiM

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_e7879af574ab7f40639b5957e49e1041_cryptolocker

    • Size

      42KB

    • MD5

      e7879af574ab7f40639b5957e49e1041

    • SHA1

      e71a4dacdec57a475cefba38d94691122157cbda

    • SHA256

      8c5331fc1e5b9971da1545a4e1409bb95028760e748ed0bc3eecd2dfd36d9073

    • SHA512

      96899b116788b5b6e70e97ab0d9ec1d930d3d82fbe6d243a93cb07ab57b04964c9594e98f48c4a633dbc8ba64c74612009c3f88519a750d7f751796c41def257

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66nkp6z:vj+jsMQMOtEvwDpj5HW5IiM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks