Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_8c98859b30a483bd4ac502a4877429e4_cryptolocker

  • Size

    40KB

  • Sample

    240204-ebvd3aggc9

  • MD5

    8c98859b30a483bd4ac502a4877429e4

  • SHA1

    eed19cd1423a2e6b7241230a34a0fe66d9c3e3e4

  • SHA256

    eaba293891f7ce59bfe2454cce2bbe45361147307e3906fcb90fe53a98b069cd

  • SHA512

    0eecb5a44bd4caeadd819cc8dba166bf3c9130f2d18142e99f55b29497916ee8a9e2f2d2a4e4c5a8851aab0df4048bd47f78ddc67348c37f619daf687bdd87f4

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bT2:ZzFbxmLPWQMOtEvwDpjLeU3u

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_8c98859b30a483bd4ac502a4877429e4_cryptolocker

    • Size

      40KB

    • MD5

      8c98859b30a483bd4ac502a4877429e4

    • SHA1

      eed19cd1423a2e6b7241230a34a0fe66d9c3e3e4

    • SHA256

      eaba293891f7ce59bfe2454cce2bbe45361147307e3906fcb90fe53a98b069cd

    • SHA512

      0eecb5a44bd4caeadd819cc8dba166bf3c9130f2d18142e99f55b29497916ee8a9e2f2d2a4e4c5a8851aab0df4048bd47f78ddc67348c37f619daf687bdd87f4

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bT2:ZzFbxmLPWQMOtEvwDpjLeU3u

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks