Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-29...er.exe

windows7-x64

9

2024-01-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-29_76b2e9e16b0fbaa16d57f36e95b242b6_cryptolocker

  • Size

    39KB

  • Sample

    240129-ht2smscea2

  • MD5

    76b2e9e16b0fbaa16d57f36e95b242b6

  • SHA1

    2fa28ccb59ee9a683e4c33d4c47ddc2dfba3143b

  • SHA256

    c66b73bebe7f418cc9d9d855fc5eb391df69e791b46c3ab1e1f1d9a813451756

  • SHA512

    455e161bb33a56c1d4e5df6af899dab64be61a867bd6325ab081b8cd478c2e393010953c54f06fdd2fd483e4fa516a29bf340dcfc7829d384dbfbc536a441b7d

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO5:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6gi

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_76b2e9e16b0fbaa16d57f36e95b242b6_cryptolocker

    • Size

      39KB

    • MD5

      76b2e9e16b0fbaa16d57f36e95b242b6

    • SHA1

      2fa28ccb59ee9a683e4c33d4c47ddc2dfba3143b

    • SHA256

      c66b73bebe7f418cc9d9d855fc5eb391df69e791b46c3ab1e1f1d9a813451756

    • SHA512

      455e161bb33a56c1d4e5df6af899dab64be61a867bd6325ab081b8cd478c2e393010953c54f06fdd2fd483e4fa516a29bf340dcfc7829d384dbfbc536a441b7d

    • SSDEEP

      384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO5:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6gi

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks