Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_64923488ef7a9ca6258f1990f912a22b_cryptolocker

  • Size

    41KB

  • Sample

    240217-sxcm2agc2s

  • MD5

    64923488ef7a9ca6258f1990f912a22b

  • SHA1

    f1c52dfb7e8a4fbe740bcafd006fd24d49096941

  • SHA256

    b97b918ee73c621376b9ede878d466cdf7eb8c9ba7ea7f670f044158da2d6091

  • SHA512

    2734bc41bfb00b56a1f190282d474e334c3ba085e3e8a3b9c8835fb8a13bf4242339cc9eb78faf8c21626e3e2510b7646389c03db6557df4d4c940db1860793e

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGA:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+sR

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_64923488ef7a9ca6258f1990f912a22b_cryptolocker

    • Size

      41KB

    • MD5

      64923488ef7a9ca6258f1990f912a22b

    • SHA1

      f1c52dfb7e8a4fbe740bcafd006fd24d49096941

    • SHA256

      b97b918ee73c621376b9ede878d466cdf7eb8c9ba7ea7f670f044158da2d6091

    • SHA512

      2734bc41bfb00b56a1f190282d474e334c3ba085e3e8a3b9c8835fb8a13bf4242339cc9eb78faf8c21626e3e2510b7646389c03db6557df4d4c940db1860793e

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGA:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+sR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks