Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_5feb0ba46daf0766a19f30fcbac026bf_cryptolocker

  • Size

    35KB

  • Sample

    240214-eeq6tahe23

  • MD5

    5feb0ba46daf0766a19f30fcbac026bf

  • SHA1

    668cfcfc35f13b36b757fe589ab744247debc6de

  • SHA256

    5d6bda56ba66b2bddb43b9c4c4155dc5a6a65e9d7bebe2994255b5408832ff5b

  • SHA512

    3b9c4799ad3736e1e6174c60683e33b72d51f9c436a4dcc469d7bcc7b594d42eb40e47fb4426bfc4a58544235e79cc6b9d3408d0166795e5e6adc8771f4b0313

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKUC:btB9g/WItCSsAGjX7e9N0hunKUC

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_5feb0ba46daf0766a19f30fcbac026bf_cryptolocker

    • Size

      35KB

    • MD5

      5feb0ba46daf0766a19f30fcbac026bf

    • SHA1

      668cfcfc35f13b36b757fe589ab744247debc6de

    • SHA256

      5d6bda56ba66b2bddb43b9c4c4155dc5a6a65e9d7bebe2994255b5408832ff5b

    • SHA512

      3b9c4799ad3736e1e6174c60683e33b72d51f9c436a4dcc469d7bcc7b594d42eb40e47fb4426bfc4a58544235e79cc6b9d3408d0166795e5e6adc8771f4b0313

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKUC:btB9g/WItCSsAGjX7e9N0hunKUC

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks