Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-12...er.exe

windows7-x64

9

2024-02-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-12_25215e211c833719bd917b118c5e5c3a_cryptolocker

  • Size

    83KB

  • Sample

    240212-x3e3kabb2z

  • MD5

    25215e211c833719bd917b118c5e5c3a

  • SHA1

    11258a1cd600f3dfcf01f12592cf38d788eb651e

  • SHA256

    4b2bd1fde41b8f3178f874853bd08a949b858d97c6df2bd1587a0c8e65b42827

  • SHA512

    e457394e2c70f4e943d8333ea6e015073483be6180149621c8ba7c9509411a7e3462963cb958bc1a613d12fcdc0e45d68a501e3f66c1a8a55ef60570721a4c5f

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQK:V6a+pOtEvwDpjvpM

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_25215e211c833719bd917b118c5e5c3a_cryptolocker

    • Size

      83KB

    • MD5

      25215e211c833719bd917b118c5e5c3a

    • SHA1

      11258a1cd600f3dfcf01f12592cf38d788eb651e

    • SHA256

      4b2bd1fde41b8f3178f874853bd08a949b858d97c6df2bd1587a0c8e65b42827

    • SHA512

      e457394e2c70f4e943d8333ea6e015073483be6180149621c8ba7c9509411a7e3462963cb958bc1a613d12fcdc0e45d68a501e3f66c1a8a55ef60570721a4c5f

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQK:V6a+pOtEvwDpjvpM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks