Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-23...er.exe

windows7-x64

9

2024-02-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker

  • Size

    40KB

  • Sample

    240223-srdcdach81

  • MD5

    881d4b0e91b8b1636314a16c531de30d

  • SHA1

    9dcef4bc488e8924aa1624de2c2bf57d0352a110

  • SHA256

    e1a9999c6ac31caa1c159ee8b5a21c99b26e12568c3699799bd8e5c40786ef4e

  • SHA512

    476796356f4d6c3069537306c8bd91591856890c4740be65cc0b5688b9fdceb69fec7d6dc3d0842635ba377714be335ea36c1b4314e3f81215602f34f9052e0f

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbZM+iS:bAvJCYOOvbRPDEgXrNekd7l94i3p+kuG

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_881d4b0e91b8b1636314a16c531de30d_cryptolocker

    • Size

      40KB

    • MD5

      881d4b0e91b8b1636314a16c531de30d

    • SHA1

      9dcef4bc488e8924aa1624de2c2bf57d0352a110

    • SHA256

      e1a9999c6ac31caa1c159ee8b5a21c99b26e12568c3699799bd8e5c40786ef4e

    • SHA512

      476796356f4d6c3069537306c8bd91591856890c4740be65cc0b5688b9fdceb69fec7d6dc3d0842635ba377714be335ea36c1b4314e3f81215602f34f9052e0f

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbZM+iS:bAvJCYOOvbRPDEgXrNekd7l94i3p+kuG

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks