Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-26...er.exe

windows7-x64

9

2024-01-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-26_a734acd9f9ca7ca5383b3081cd0f29e5_cryptolocker

  • Size

    82KB

  • Sample

    240126-c443vsdfen

  • MD5

    a734acd9f9ca7ca5383b3081cd0f29e5

  • SHA1

    d0d858becf8e027b7c424ab51a6b0a1036583477

  • SHA256

    1ef6b7556a54fb026120b6314e09d10a25ea84a7ce17f198c06287ed966f5f4d

  • SHA512

    dc849a12f2cb38f9fa3d0f41dd303bc086f971c5ac548ddfb4417e701bc74e316e1aa917e1ba29745904a4a20cce8f97a313ce87a52e7644c3f27a6001cc31c3

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFH9:V6QFElP6n+gMQMOtEvwDpjyaLccVNlh

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_a734acd9f9ca7ca5383b3081cd0f29e5_cryptolocker

    • Size

      82KB

    • MD5

      a734acd9f9ca7ca5383b3081cd0f29e5

    • SHA1

      d0d858becf8e027b7c424ab51a6b0a1036583477

    • SHA256

      1ef6b7556a54fb026120b6314e09d10a25ea84a7ce17f198c06287ed966f5f4d

    • SHA512

      dc849a12f2cb38f9fa3d0f41dd303bc086f971c5ac548ddfb4417e701bc74e316e1aa917e1ba29745904a4a20cce8f97a313ce87a52e7644c3f27a6001cc31c3

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFH9:V6QFElP6n+gMQMOtEvwDpjyaLccVNlh

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks