Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_630a29770500cc89e621c2f16d093107_cryptolocker

  • Size

    59KB

  • Sample

    240125-g87rrsabc6

  • MD5

    630a29770500cc89e621c2f16d093107

  • SHA1

    465ccafb72cd7dfa15124e0465f05c1af3970a1f

  • SHA256

    bb6999c96056a0379cf044b654e20e379b6780dd48c454e4c73028d76af6958c

  • SHA512

    e3c2aa1b2f2bc1751a06471d1f0566279875337bb79a28ab926a5a8e351834460d7a4872f1cbe0895a31b85cd612d0cb9c47bbacc6160b0ea78661454c9ac367

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMA:TCjsIOtEvwDpj5HE/OUHnSMP

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_630a29770500cc89e621c2f16d093107_cryptolocker

    • Size

      59KB

    • MD5

      630a29770500cc89e621c2f16d093107

    • SHA1

      465ccafb72cd7dfa15124e0465f05c1af3970a1f

    • SHA256

      bb6999c96056a0379cf044b654e20e379b6780dd48c454e4c73028d76af6958c

    • SHA512

      e3c2aa1b2f2bc1751a06471d1f0566279875337bb79a28ab926a5a8e351834460d7a4872f1cbe0895a31b85cd612d0cb9c47bbacc6160b0ea78661454c9ac367

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMA:TCjsIOtEvwDpj5HE/OUHnSMP

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks