Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-24...er.exe

windows7-x64

9

2024-01-24...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-24_2eaa19f1f553a26538f62b873fc044b6_cryptolocker

  • Size

    72KB

  • Sample

    240124-d12zrshfa9

  • MD5

    2eaa19f1f553a26538f62b873fc044b6

  • SHA1

    5852d16ae7eb6f1cfdbcaf39806a1dd47d4c73c1

  • SHA256

    cfd61ccef0f2339102ded1f11792ed37f459736299330ba51f70623380be6713

  • SHA512

    4d7c2feef7d63a5b5f6b865ff4e778d7a4f5eb922c22dcbdc39e64ed8a97ff656efd8b0d4f124f63dadd826f6f742b97b4444823ddcb8bbca8dd9ab24a92fbb5

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Me:X6a+SOtEvwDpjBZYvQd2j

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_2eaa19f1f553a26538f62b873fc044b6_cryptolocker

    • Size

      72KB

    • MD5

      2eaa19f1f553a26538f62b873fc044b6

    • SHA1

      5852d16ae7eb6f1cfdbcaf39806a1dd47d4c73c1

    • SHA256

      cfd61ccef0f2339102ded1f11792ed37f459736299330ba51f70623380be6713

    • SHA512

      4d7c2feef7d63a5b5f6b865ff4e778d7a4f5eb922c22dcbdc39e64ed8a97ff656efd8b0d4f124f63dadd826f6f742b97b4444823ddcb8bbca8dd9ab24a92fbb5

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1Me:X6a+SOtEvwDpjBZYvQd2j

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks