Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_f646033e48e8e830b55e8183f5d51208_cryptolocker

  • Size

    59KB

  • Sample

    240217-jvxqradc72

  • MD5

    f646033e48e8e830b55e8183f5d51208

  • SHA1

    a643679e78dd1a444f256210a203f4d3e8b71719

  • SHA256

    01c5a555c72a60eca9d5a9e9f4e70c155850b8a070e644bb03287e2eb4247527

  • SHA512

    7924e7b333333cb74f54c6f368e1df3f0765e55e8cd6288c6d6df767abdf1aa0248ca4f6505ea2c8dc7f1344e5b9c228732248bd4eed27b7ff4d46584dbbfffa

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMd3:TCjsIOtEvwDpj5HE/OUHnSM2

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_f646033e48e8e830b55e8183f5d51208_cryptolocker

    • Size

      59KB

    • MD5

      f646033e48e8e830b55e8183f5d51208

    • SHA1

      a643679e78dd1a444f256210a203f4d3e8b71719

    • SHA256

      01c5a555c72a60eca9d5a9e9f4e70c155850b8a070e644bb03287e2eb4247527

    • SHA512

      7924e7b333333cb74f54c6f368e1df3f0765e55e8cd6288c6d6df767abdf1aa0248ca4f6505ea2c8dc7f1344e5b9c228732248bd4eed27b7ff4d46584dbbfffa

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMd3:TCjsIOtEvwDpj5HE/OUHnSM2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks