Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-28...er.exe

windows7-x64

9

2024-01-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-28_1ecee7b754feeba8166e97b0f498a5fc_cryptolocker

  • Size

    77KB

  • Sample

    240128-y6bpzshec9

  • MD5

    1ecee7b754feeba8166e97b0f498a5fc

  • SHA1

    8ff6e3f210859f57f62cb8d8e4268f6cde86291e

  • SHA256

    7caf80e5d6566ad1ff5f481887ebd5ce03fb413eb385296092c6dad17a3c24dd

  • SHA512

    52c6009ee0624816f3ff6bb60071edcbd58cd75ab88c4f2d08e27c82bfe0e8f7ef66e3dfd565ae98dc88b79ff6157366ed7687680c01aee971e0b0abb0f55bc6

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufj0:vCjsIOtEvwDpj5H9YvQd2P0

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_1ecee7b754feeba8166e97b0f498a5fc_cryptolocker

    • Size

      77KB

    • MD5

      1ecee7b754feeba8166e97b0f498a5fc

    • SHA1

      8ff6e3f210859f57f62cb8d8e4268f6cde86291e

    • SHA256

      7caf80e5d6566ad1ff5f481887ebd5ce03fb413eb385296092c6dad17a3c24dd

    • SHA512

      52c6009ee0624816f3ff6bb60071edcbd58cd75ab88c4f2d08e27c82bfe0e8f7ef66e3dfd565ae98dc88b79ff6157366ed7687680c01aee971e0b0abb0f55bc6

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufj0:vCjsIOtEvwDpj5H9YvQd2P0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks