Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_578fe1e47a97a7f893259e22627b5f8d_cryptolocker

  • Size

    52KB

  • Sample

    240219-mh3m1scc5v

  • MD5

    578fe1e47a97a7f893259e22627b5f8d

  • SHA1

    524aae2bf147df46d69a25675f0deeebde0af4d6

  • SHA256

    00475c757694e5140f6605afd5bb8360c7b1c77c518f3da610e0cf6be08748ab

  • SHA512

    aa6f9717c43b5b0473eb626e28fefeda4c17e24d1a33a35b53f0eea9a75cdb57a9e2d8e824090ac77424a6acd25b3e490c6b8b4738fb1a95d65ec87aba508e9e

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakl7:V6a+pOtEvwDpj8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_578fe1e47a97a7f893259e22627b5f8d_cryptolocker

    • Size

      52KB

    • MD5

      578fe1e47a97a7f893259e22627b5f8d

    • SHA1

      524aae2bf147df46d69a25675f0deeebde0af4d6

    • SHA256

      00475c757694e5140f6605afd5bb8360c7b1c77c518f3da610e0cf6be08748ab

    • SHA512

      aa6f9717c43b5b0473eb626e28fefeda4c17e24d1a33a35b53f0eea9a75cdb57a9e2d8e824090ac77424a6acd25b3e490c6b8b4738fb1a95d65ec87aba508e9e

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakl7:V6a+pOtEvwDpj8

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks