Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_622b03e6452238446095906ec7a6d76c_cryptolocker

  • Size

    35KB

  • Sample

    240204-pqtfesbegn

  • MD5

    622b03e6452238446095906ec7a6d76c

  • SHA1

    1ce4e6d8db531eb649a9ed912e5134ab3b7b2f8c

  • SHA256

    18031f53be21379ff77997b346ff1b6f2378e825d441723150a46e88bfde8a88

  • SHA512

    77c97e292084c9bf18846f09d3f9f6d9da34b9a0dff32e90327f56bc20b1142efa8e0d96302e18b32dd0d6ad8175ef69c342e7b5a0d6f149003361496b4bfe2a

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg1831:btB9g/WItCSsAGjX7e9N7

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_622b03e6452238446095906ec7a6d76c_cryptolocker

    • Size

      35KB

    • MD5

      622b03e6452238446095906ec7a6d76c

    • SHA1

      1ce4e6d8db531eb649a9ed912e5134ab3b7b2f8c

    • SHA256

      18031f53be21379ff77997b346ff1b6f2378e825d441723150a46e88bfde8a88

    • SHA512

      77c97e292084c9bf18846f09d3f9f6d9da34b9a0dff32e90327f56bc20b1142efa8e0d96302e18b32dd0d6ad8175ef69c342e7b5a0d6f149003361496b4bfe2a

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiA0jgg1831:btB9g/WItCSsAGjX7e9N7

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks