Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-27_8c3f82e727e434aba5baf0c8fe603ea9_cryptolocker

  • Size

    131KB

  • Sample

    240127-np8naadagr

  • MD5

    8c3f82e727e434aba5baf0c8fe603ea9

  • SHA1

    cebbb33f0101190e3b77c16fefd438a7b00eab40

  • SHA256

    ec74faf149f1d56bbf825e6d7868f96c5fbdba22ab9bd7767113fbefc8abdc80

  • SHA512

    5135d1371886094d2e374ed8f351dd65d4e3ff671196ddd59a95d5b9381bb835bd0262f4ad2499382d9837eeb435c87e3ca8bf7b070ff2d897204cc297c9b668

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbD:V6a+pOtEvwDpjt22H

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_8c3f82e727e434aba5baf0c8fe603ea9_cryptolocker

    • Size

      131KB

    • MD5

      8c3f82e727e434aba5baf0c8fe603ea9

    • SHA1

      cebbb33f0101190e3b77c16fefd438a7b00eab40

    • SHA256

      ec74faf149f1d56bbf825e6d7868f96c5fbdba22ab9bd7767113fbefc8abdc80

    • SHA512

      5135d1371886094d2e374ed8f351dd65d4e3ff671196ddd59a95d5b9381bb835bd0262f4ad2499382d9837eeb435c87e3ca8bf7b070ff2d897204cc297c9b668

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQbD:V6a+pOtEvwDpjt22H

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks