Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-07...er.exe

windows7-x64

9

2024-03-07...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-07_a3f57a3ef68e0f832f43a9dbece0d48f_cryptolocker

  • Size

    49KB

  • Sample

    240307-a42lmacd28

  • MD5

    a3f57a3ef68e0f832f43a9dbece0d48f

  • SHA1

    5efca3be12ebf31e6ffc7a408442bc91f2d7b4a9

  • SHA256

    5bf0ca7f4adc92329c756c3a45ea959676eef4e759bb98668dd4f76c0089eb81

  • SHA512

    198eb22414c99184c111c529cb6942c072c6e1442cc616b08878b5f24aa423af9ab6d8719495119493ac8fd30a187219cdc1ca907d144841f5331172bc2e6cdf

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIBe:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7f

Score
10/10

Malware Config

Targets

    • Target

      2024-03-07_a3f57a3ef68e0f832f43a9dbece0d48f_cryptolocker

    • Size

      49KB

    • MD5

      a3f57a3ef68e0f832f43a9dbece0d48f

    • SHA1

      5efca3be12ebf31e6ffc7a408442bc91f2d7b4a9

    • SHA256

      5bf0ca7f4adc92329c756c3a45ea959676eef4e759bb98668dd4f76c0089eb81

    • SHA512

      198eb22414c99184c111c529cb6942c072c6e1442cc616b08878b5f24aa423af9ab6d8719495119493ac8fd30a187219cdc1ca907d144841f5331172bc2e6cdf

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIBe:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7f

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks