Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27/02/2024, 15:30
General
-
Target
2024-02-27_2fc839c994acf259d6f7d3a925935c09_cryptolocker.exe
-
Size
104KB
-
MD5
2fc839c994acf259d6f7d3a925935c09
-
SHA1
f6d383dcaea8bd56540fdfa104fcdc7c37a65625
-
SHA256
54e3918e6276e836d2d1482098ec7d874ee66a5fea6a59d802b5ebb959f21747
-
SHA512
58c9c9416bb27889fb26da2f67021c46a2717ab1b14d25cc24c3a6e7c4ad0050417f1126bdc0fe76430ae639f621dc9cf1a3ebfccbd780bc8d0377d60d5ac8be
-
SSDEEP
1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksN:1nK6a+qdOOtEvwDpjN
Malware Config
Signatures
-
Detection of CryptoLocker Variants 7 IoCs
-
Detection of Cryptolocker Samples 7 IoCs
-
UPX dump on OEP (original entry point) 7 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-27_2fc839c994acf259d6f7d3a925935c09_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-27_2fc839c994acf259d6f7d3a925935c09_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
MD53b9d5972642c5cff069f131c288f3aa0
SHA17367b8ace5ffa0da5fa7c9aa9e8b2b88ceda6058
SHA256e32efa428d56ac7703b8cc57da86db207bd131e40950e9db54270d8709fe8019
SHA512fb4244098e93b72eae626e5a09424564f8933bfc23e7951adef7dd5ee0f7f34dcaf92d4dcb363ce34f53cf6a847b88c8cf41003c99f298a8305cd0a7a9048fb9
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB