Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/02/2024, 06:33
General
-
Target
2024-02-18_42a3b9a9881361991e195c487d9e2aab_cryptolocker.exe
-
Size
126KB
-
MD5
42a3b9a9881361991e195c487d9e2aab
-
SHA1
0388fff64b143f48951b57cc25e98a1fa730ff72
-
SHA256
81a2404728b607684165d83b42b718d68791c5a593effb880c6388f1d1ec0977
-
SHA512
7dff20315c7d5385a2b418d4b812541cda341ea8493cfc4d6a8f64269d50457199a31e0af8f200d9014698850c93dfac9a508986b498db876571d354582fceee
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgp699GNtL1eY:AnBdOOtEvwDpj6z+
Malware Config
Signatures
-
Detection of CryptoLocker Variants 6 IoCs
-
Detection of Cryptolocker Samples 6 IoCs
-
UPX dump on OEP (original entry point) 6 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 6 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_42a3b9a9881361991e195c487d9e2aab_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_42a3b9a9881361991e195c487d9e2aab_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
126KB
MD545d3111e488da89245eae21b4ca1b087
SHA13826ff7f4e13a58259be00810f3475c5aab741b6
SHA2565745722dd329852dbf70621a89aee2497822ead8b9362da67cd36674bd763e08
SHA51212b5019068d78106c2293d92b1b27bb35f5afac6bace660b6cb0e6f39760bbe0fcb341e936143ecd337bf09f9b4f870ece2786779b91702db8fb554ebe85cd82
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB