Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_9943330e8a089b103bcaf24a1271a172_cryptolocker

  • Size

    60KB

  • Sample

    240214-r6n7rade9t

  • MD5

    9943330e8a089b103bcaf24a1271a172

  • SHA1

    6022ff0cb803dc5fb169b07c3d906c97febcde99

  • SHA256

    437d9ca31a28c5dfa58a5670810994acaf88902fe64a64b6db8687330994217b

  • SHA512

    ec73d859eef607e730913861928d61bf6b52df0200c5aed6d80c72ccd94b57bd3dd47c5b755c7584b224b7b2c9092ff21a3fe82ae2b5c4a34038ce333e87cf30

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsv:BbdDmjr+OtEvwDpjM8H

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_9943330e8a089b103bcaf24a1271a172_cryptolocker

    • Size

      60KB

    • MD5

      9943330e8a089b103bcaf24a1271a172

    • SHA1

      6022ff0cb803dc5fb169b07c3d906c97febcde99

    • SHA256

      437d9ca31a28c5dfa58a5670810994acaf88902fe64a64b6db8687330994217b

    • SHA512

      ec73d859eef607e730913861928d61bf6b52df0200c5aed6d80c72ccd94b57bd3dd47c5b755c7584b224b7b2c9092ff21a3fe82ae2b5c4a34038ce333e87cf30

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsv:BbdDmjr+OtEvwDpjM8H

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks