Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_b453984e977a8dd37fb6a2ba0f0d965e_cryptolocker

  • Size

    55KB

  • Sample

    240204-b4eyashadr

  • MD5

    b453984e977a8dd37fb6a2ba0f0d965e

  • SHA1

    96da83c34af7387498cb473dea730aaf019d09b5

  • SHA256

    26b3ecb94a2fd8b8c33251d637049672ef8ff2c8146d154878791b60229e4191

  • SHA512

    cf2273097efed0861b8af66737dd49682f047246d013c3a4dcadd46cce00a8227061f8a7c1326802472de0ecb8458173e59894605e00a094b141c4af47717153

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfj8:xj+VGMOtEvwDpjubEgu

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_b453984e977a8dd37fb6a2ba0f0d965e_cryptolocker

    • Size

      55KB

    • MD5

      b453984e977a8dd37fb6a2ba0f0d965e

    • SHA1

      96da83c34af7387498cb473dea730aaf019d09b5

    • SHA256

      26b3ecb94a2fd8b8c33251d637049672ef8ff2c8146d154878791b60229e4191

    • SHA512

      cf2273097efed0861b8af66737dd49682f047246d013c3a4dcadd46cce00a8227061f8a7c1326802472de0ecb8458173e59894605e00a094b141c4af47717153

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfj8:xj+VGMOtEvwDpjubEgu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks