Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-22...er.exe

windows7-x64

9

2024-01-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker

  • Size

    125KB

  • Sample

    240122-zgxftsdga3

  • MD5

    a86efb57451e90650026731d06fda140

  • SHA1

    2de0591bb5e43f5cd4ab7fcfc9ddd016bc4c6bc8

  • SHA256

    97013f2b3f725393844c617dc2fc82d6701fde7134f5c9e913faa68ace603b5c

  • SHA512

    c40f6f79a0850b1138c8863a7064a4741155c592ac8e4a00ef993978b19bb227d5688c050488fb509cd9c664673d05a27be2f1d029efc552780868cb6ec5cdd8

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//W:vCjsIOtEvwDpj5H9YvQd2RU

Score
10/10

Malware Config

Targets

    • Target

      2024-01-22_a86efb57451e90650026731d06fda140_cryptolocker

    • Size

      125KB

    • MD5

      a86efb57451e90650026731d06fda140

    • SHA1

      2de0591bb5e43f5cd4ab7fcfc9ddd016bc4c6bc8

    • SHA256

      97013f2b3f725393844c617dc2fc82d6701fde7134f5c9e913faa68ace603b5c

    • SHA512

      c40f6f79a0850b1138c8863a7064a4741155c592ac8e4a00ef993978b19bb227d5688c050488fb509cd9c664673d05a27be2f1d029efc552780868cb6ec5cdd8

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//W:vCjsIOtEvwDpj5H9YvQd2RU

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks