Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-25...er.exe

windows7-x64

9

2024-02-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-25_9e1151507dcc842418d9c781734872bf_cryptolocker

  • Size

    54KB

  • Sample

    240225-bzl6tahg62

  • MD5

    9e1151507dcc842418d9c781734872bf

  • SHA1

    a916164d6d58a06b6a3cbdbee7a17ddfb9159291

  • SHA256

    b6cf5375b58ae154cb03750c6a9bfa6a16c21167f042c034192df25f180ed99d

  • SHA512

    8e2727a56c1f1a7316fff891cadc1ae95962509fbe6ffd6d930baffd7c7d48b4b68aecc4b147292e518f6ecc55fedf8dd000f3811f1e257c613d8239e8235b15

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbP/MMaQ:xj+VGMOtEvwDpjubXMMaQ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-25_9e1151507dcc842418d9c781734872bf_cryptolocker

    • Size

      54KB

    • MD5

      9e1151507dcc842418d9c781734872bf

    • SHA1

      a916164d6d58a06b6a3cbdbee7a17ddfb9159291

    • SHA256

      b6cf5375b58ae154cb03750c6a9bfa6a16c21167f042c034192df25f180ed99d

    • SHA512

      8e2727a56c1f1a7316fff891cadc1ae95962509fbe6ffd6d930baffd7c7d48b4b68aecc4b147292e518f6ecc55fedf8dd000f3811f1e257c613d8239e8235b15

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbP/MMaQ:xj+VGMOtEvwDpjubXMMaQ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks