Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-04...er.exe

windows7-x64

9

2024-02-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-04_4b1c30f28411dcc84deada76fbf00a59_cryptolocker

  • Size

    82KB

  • Sample

    240204-vzrwvafbb4

  • MD5

    4b1c30f28411dcc84deada76fbf00a59

  • SHA1

    e67d86f5b2f1eaba36e69328db8eb0c6e6f45771

  • SHA256

    3c0948a44599caefe1e69ccafdc1610b6c35531be3e3454deec7d3acc2a0f354

  • SHA512

    8dc23c7c8387adcab57278d2ef5caa4a48949d6d8a8da1657984ebcee0749b62d29e390565a5e40622abce4c6815213de90291be771080bcc97154fc5aa5b074

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQ8L:V6a+pOtEvwDpjvp4

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_4b1c30f28411dcc84deada76fbf00a59_cryptolocker

    • Size

      82KB

    • MD5

      4b1c30f28411dcc84deada76fbf00a59

    • SHA1

      e67d86f5b2f1eaba36e69328db8eb0c6e6f45771

    • SHA256

      3c0948a44599caefe1e69ccafdc1610b6c35531be3e3454deec7d3acc2a0f354

    • SHA512

      8dc23c7c8387adcab57278d2ef5caa4a48949d6d8a8da1657984ebcee0749b62d29e390565a5e40622abce4c6815213de90291be771080bcc97154fc5aa5b074

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQ8L:V6a+pOtEvwDpjvp4

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks