Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_4fd641b34a9cefac25c637d942fdabbb_cryptolocker

  • Size

    58KB

  • Sample

    240128-e5x22sbcg2

  • MD5

    4fd641b34a9cefac25c637d942fdabbb

  • SHA1

    e841ed0f4f3a799d056c9ebdf3c7bb73ee326675

  • SHA256

    6043080749c24698cf20972fef7e48d43b51df1e822b548b730e2b0af6158b5c

  • SHA512

    55f17f1f0300b23f59bd07021abf42c9bc18a4ef96c36a1907361fadfaf899bbc8452af32797b27e86cc898fb3fece66568b9d76b2ac7d2a476a65e04f357b54

  • SSDEEP

    1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHc:btng54SMLr+/AO/kIhfoKMHdt

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_4fd641b34a9cefac25c637d942fdabbb_cryptolocker

    • Size

      58KB

    • MD5

      4fd641b34a9cefac25c637d942fdabbb

    • SHA1

      e841ed0f4f3a799d056c9ebdf3c7bb73ee326675

    • SHA256

      6043080749c24698cf20972fef7e48d43b51df1e822b548b730e2b0af6158b5c

    • SHA512

      55f17f1f0300b23f59bd07021abf42c9bc18a4ef96c36a1907361fadfaf899bbc8452af32797b27e86cc898fb3fece66568b9d76b2ac7d2a476a65e04f357b54

    • SSDEEP

      1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHc:btng54SMLr+/AO/kIhfoKMHdt

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks