Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-27...er.exe

windows7-x64

9

2024-01-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-27_1b6647acc53d46afbd350350e4a5aca0_cryptolocker

  • Size

    83KB

  • Sample

    240127-ss6ejsega6

  • MD5

    1b6647acc53d46afbd350350e4a5aca0

  • SHA1

    ebf31bcbde96c54f887dfb1673575fa4002e3f2d

  • SHA256

    d305557ed042fad89c146ad41049b60f662b520d8fe56e7be6024891a92c97de

  • SHA512

    b041640eaf4bfd1d36c3e12ca13314b3ed60112bca3be5d8a782eb7e119f4d4422e9fbb34bd0404f2b7ababda834a2013eb0d0fadecbfcc484b1693659e1405d

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSL8z:V6a+pOtEvwDpjvpV

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_1b6647acc53d46afbd350350e4a5aca0_cryptolocker

    • Size

      83KB

    • MD5

      1b6647acc53d46afbd350350e4a5aca0

    • SHA1

      ebf31bcbde96c54f887dfb1673575fa4002e3f2d

    • SHA256

      d305557ed042fad89c146ad41049b60f662b520d8fe56e7be6024891a92c97de

    • SHA512

      b041640eaf4bfd1d36c3e12ca13314b3ed60112bca3be5d8a782eb7e119f4d4422e9fbb34bd0404f2b7ababda834a2013eb0d0fadecbfcc484b1693659e1405d

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSL8z:V6a+pOtEvwDpjvpV

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks