Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-27_7725f0262a937a673ae806f83ccbfce6_cryptolocker

  • Size

    56KB

  • Sample

    240127-3rjjhaegf5

  • MD5

    7725f0262a937a673ae806f83ccbfce6

  • SHA1

    b6b184cb6267a7501400d9c4e02ea0ca9a6df5b4

  • SHA256

    ebd1622345626328b49133dca24eb7f94951cc4169e7305ba7b0c30e78153ebf

  • SHA512

    e76a80662c5f174f117ce1d77b24121b41dc0e9d4b6a1f050bac1ca83ae2fa66d2cf899023a0ccb307514fed58473f7c75daefd558ba3471ee2be12dca6de79a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFX:xj+VGMOtEvwDpjubEgyX

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_7725f0262a937a673ae806f83ccbfce6_cryptolocker

    • Size

      56KB

    • MD5

      7725f0262a937a673ae806f83ccbfce6

    • SHA1

      b6b184cb6267a7501400d9c4e02ea0ca9a6df5b4

    • SHA256

      ebd1622345626328b49133dca24eb7f94951cc4169e7305ba7b0c30e78153ebf

    • SHA512

      e76a80662c5f174f117ce1d77b24121b41dc0e9d4b6a1f050bac1ca83ae2fa66d2cf899023a0ccb307514fed58473f7c75daefd558ba3471ee2be12dca6de79a

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFX:xj+VGMOtEvwDpjubEgyX

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks