Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-22_5fa791410973dc5a959b69f48c12ea82_cryptolocker

  • Size

    46KB

  • Sample

    240222-q2cgqaad5t

  • MD5

    5fa791410973dc5a959b69f48c12ea82

  • SHA1

    524539bcc4383d5c62191f3957973eef70ea8ae0

  • SHA256

    a77b88afcca0ba94a8c1d24c00c95c849e4d675134e82bfdd10af98bb613abe3

  • SHA512

    e195ce279d946254e8a9193474d9b07dd9234b7b8e60e0f9e3f448ed1e7a97da6dc75c53904e8556616c9c8e9f759aef5683215b6ef73dcf0180f359f5654c7b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldedQ:xj+VGMOtEvwDpjk/eu

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_5fa791410973dc5a959b69f48c12ea82_cryptolocker

    • Size

      46KB

    • MD5

      5fa791410973dc5a959b69f48c12ea82

    • SHA1

      524539bcc4383d5c62191f3957973eef70ea8ae0

    • SHA256

      a77b88afcca0ba94a8c1d24c00c95c849e4d675134e82bfdd10af98bb613abe3

    • SHA512

      e195ce279d946254e8a9193474d9b07dd9234b7b8e60e0f9e3f448ed1e7a97da6dc75c53904e8556616c9c8e9f759aef5683215b6ef73dcf0180f359f5654c7b

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldedQ:xj+VGMOtEvwDpjk/eu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks