Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-17...er.exe

windows7-x64

9

2024-02-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-17_2df329feacc268e1244a2c51f8cda134_cryptolocker

  • Size

    55KB

  • Sample

    240217-w4chdsab35

  • MD5

    2df329feacc268e1244a2c51f8cda134

  • SHA1

    5f49389f78e4aed588c6e58d6194146b9c3d8ad7

  • SHA256

    1993c53bfecc16db8e8a1609a9612573bed7a396dbe223894f68a403c6772bdc

  • SHA512

    02d200b17222dba73fa5bf64f6a6a158a904f20ae30fe1c64463d5ebeedb42e9ac0005715b08ab9ee0ed065574c32255a01f6de396fdf698a217f64a31ec8e95

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7WwfeW:6j+1NMOtEvwDpjr8oxEqW

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_2df329feacc268e1244a2c51f8cda134_cryptolocker

    • Size

      55KB

    • MD5

      2df329feacc268e1244a2c51f8cda134

    • SHA1

      5f49389f78e4aed588c6e58d6194146b9c3d8ad7

    • SHA256

      1993c53bfecc16db8e8a1609a9612573bed7a396dbe223894f68a403c6772bdc

    • SHA512

      02d200b17222dba73fa5bf64f6a6a158a904f20ae30fe1c64463d5ebeedb42e9ac0005715b08ab9ee0ed065574c32255a01f6de396fdf698a217f64a31ec8e95

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7WwfeW:6j+1NMOtEvwDpjr8oxEqW

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks