Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-09...er.exe

windows7-x64

9

2024-03-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker

  • Size

    54KB

  • Sample

    240309-xblq2afb56

  • MD5

    5e7be9acce715f6d462185933bc1e4f6

  • SHA1

    d3e3bc2a7691a9f5b5a5dbdda4a4c1d917812409

  • SHA256

    fd27e3d3a13d766d722c5f6ef1e3db0945b12f00207890bb65e1ce7d7e0a35cb

  • SHA512

    1bcc859c5073876728b028aa850f137a42807bc0a22f7500d29d6bf552c1bd2c0fdc3cbffde6b5d3be37cce0d66547e0a213d93b8cb633233de4aac9d72dea3d

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CCjgB:79mqyNhQMOtEvwDpjBPY7xv3g8OB

Score
10/10

Malware Config

Targets

    • Target

      2024-03-09_5e7be9acce715f6d462185933bc1e4f6_cryptolocker

    • Size

      54KB

    • MD5

      5e7be9acce715f6d462185933bc1e4f6

    • SHA1

      d3e3bc2a7691a9f5b5a5dbdda4a4c1d917812409

    • SHA256

      fd27e3d3a13d766d722c5f6ef1e3db0945b12f00207890bb65e1ce7d7e0a35cb

    • SHA512

      1bcc859c5073876728b028aa850f137a42807bc0a22f7500d29d6bf552c1bd2c0fdc3cbffde6b5d3be37cce0d66547e0a213d93b8cb633233de4aac9d72dea3d

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CCjgB:79mqyNhQMOtEvwDpjBPY7xv3g8OB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks