Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-08...er.exe

windows7-x64

9

2024-03-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-08_44f0a9f911a2c79e3638da37db916003_cryptolocker

  • Size

    57KB

  • Sample

    240308-c3q5lseb9y

  • MD5

    44f0a9f911a2c79e3638da37db916003

  • SHA1

    a1df4e73c09e67d1cb9b9219b207da5b93c6d569

  • SHA256

    341cb20dbeb83339f0ee3fd95cab65eee7541797c0926b1c9560001a4cf92143

  • SHA512

    2e08ddc7f4488c2c6526f2984cccde743d33c9579b136eb841c2a7810543ed3ef85f682343461ee9ab0520be4955385d56c5136f574e9f8a2f9bf4f4dbf59b57

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwEt:xj+VGMOtEvwDpjubEgywEt

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_44f0a9f911a2c79e3638da37db916003_cryptolocker

    • Size

      57KB

    • MD5

      44f0a9f911a2c79e3638da37db916003

    • SHA1

      a1df4e73c09e67d1cb9b9219b207da5b93c6d569

    • SHA256

      341cb20dbeb83339f0ee3fd95cab65eee7541797c0926b1c9560001a4cf92143

    • SHA512

      2e08ddc7f4488c2c6526f2984cccde743d33c9579b136eb841c2a7810543ed3ef85f682343461ee9ab0520be4955385d56c5136f574e9f8a2f9bf4f4dbf59b57

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwEt:xj+VGMOtEvwDpjubEgywEt

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks