Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker

  • Size

    40KB

  • Sample

    240222-2krqvsga2x

  • MD5

    ab6848fa8bd5eca065c94fadffe0701a

  • SHA1

    fb20a0680a45bc584799e36e95912062d0535dbe

  • SHA256

    ea6ee7df81ff4f1285d19a7a4be13a26d378a02898386f9b9c37be7f531216c3

  • SHA512

    ccca35173336ffdd5f5b984ca478f949b635a01db190125a838aef9a2958fb7de13f5f3fb04b7e78e3fcc926b4ce88e0b21b03bae42e478376bd9eddd56bd02a

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFR1/:m5nkFNMOtEvwDpjG8hhX3/

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker

    • Size

      40KB

    • MD5

      ab6848fa8bd5eca065c94fadffe0701a

    • SHA1

      fb20a0680a45bc584799e36e95912062d0535dbe

    • SHA256

      ea6ee7df81ff4f1285d19a7a4be13a26d378a02898386f9b9c37be7f531216c3

    • SHA512

      ccca35173336ffdd5f5b984ca478f949b635a01db190125a838aef9a2958fb7de13f5f3fb04b7e78e3fcc926b4ce88e0b21b03bae42e478376bd9eddd56bd02a

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFR1/:m5nkFNMOtEvwDpjG8hhX3/

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks