Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-28...er.exe

windows7-x64

9

2024-02-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-28_78917d0a526ff965045806dcb654f642_cryptolocker

  • Size

    97KB

  • Sample

    240228-jns4zseg22

  • MD5

    78917d0a526ff965045806dcb654f642

  • SHA1

    faf64f2bcba5a7782d6af7cd2396200838886c04

  • SHA256

    30d5344b1504183884046b7471cef93d479c98ef4f0b0e0af59a41ee627d1126

  • SHA512

    39a42041e0b205247cd13dbfc11ba9a9ae2facde1c5e0a51852431c73d4bbfcfd54937efaa9cbf3172276eb0b8680ad35cd2750d2d8e6232c6bc53ca3a6816cd

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT302U:xj+VGMOtEvwDpjubwQEIiVmkf0Z

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_78917d0a526ff965045806dcb654f642_cryptolocker

    • Size

      97KB

    • MD5

      78917d0a526ff965045806dcb654f642

    • SHA1

      faf64f2bcba5a7782d6af7cd2396200838886c04

    • SHA256

      30d5344b1504183884046b7471cef93d479c98ef4f0b0e0af59a41ee627d1126

    • SHA512

      39a42041e0b205247cd13dbfc11ba9a9ae2facde1c5e0a51852431c73d4bbfcfd54937efaa9cbf3172276eb0b8680ad35cd2750d2d8e6232c6bc53ca3a6816cd

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT302U:xj+VGMOtEvwDpjubwQEIiVmkf0Z

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks