Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-03...er.exe

windows7-x64

9

2024-02-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-03_151c3e8e14c8aee4818ba17ffd04c6fb_cryptolocker

  • Size

    33KB

  • Sample

    240203-e1f8qsbedr

  • MD5

    151c3e8e14c8aee4818ba17ffd04c6fb

  • SHA1

    eb2e917fe0d7a8048725ab8baf3950906c16d688

  • SHA256

    6c507b68f662e45c24ab93a48f6822f7ecb2b13f4748cc6138e1825b7799edd6

  • SHA512

    2cb5e5d99c7f7fe1429170f2e4c09499dcd46cba8408fc9a6d0ae3b6b0bc098bc777a8ffc1e826db8070b8a2733b792b0fba9fbf01f46ba2e31a08b69a40ce23

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQA6:b/yC4GyNM01GuQMNXw2PSjHC02ltA6

Score
10/10
discovery

Malware Config

Targets

    • Target

      2024-02-03_151c3e8e14c8aee4818ba17ffd04c6fb_cryptolocker

    • Size

      33KB

    • MD5

      151c3e8e14c8aee4818ba17ffd04c6fb

    • SHA1

      eb2e917fe0d7a8048725ab8baf3950906c16d688

    • SHA256

      6c507b68f662e45c24ab93a48f6822f7ecb2b13f4748cc6138e1825b7799edd6

    • SHA512

      2cb5e5d99c7f7fe1429170f2e4c09499dcd46cba8408fc9a6d0ae3b6b0bc098bc777a8ffc1e826db8070b8a2733b792b0fba9fbf01f46ba2e31a08b69a40ce23

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzu02lOQA6:b/yC4GyNM01GuQMNXw2PSjHC02ltA6

    Score
    9/10
    discovery

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks