Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-11...er.exe

windows7-x64

9

2024-03-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-11_0ecbe379746f2418af37022d65f2e3a2_cryptolocker

  • Size

    126KB

  • Sample

    240311-f48mtscg69

  • MD5

    0ecbe379746f2418af37022d65f2e3a2

  • SHA1

    853f68050618b6346adb0f89a0671d53c7e7bb4b

  • SHA256

    ecb69a696cf38f35fd346b26aa5e3e61e79003faa88d05531594e4a33eb6cdf7

  • SHA512

    ac546a5f2f125190d32484485d690658818a182e645f7cd2c8539f30f682964df122d4bdc085900e22ff83ab4f764dfe10a956c2682e043b2e05e0497aeaf4e8

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVA:vCA9OtEvwDpjy

Score
10/10

Malware Config

Targets

    • Target

      2024-03-11_0ecbe379746f2418af37022d65f2e3a2_cryptolocker

    • Size

      126KB

    • MD5

      0ecbe379746f2418af37022d65f2e3a2

    • SHA1

      853f68050618b6346adb0f89a0671d53c7e7bb4b

    • SHA256

      ecb69a696cf38f35fd346b26aa5e3e61e79003faa88d05531594e4a33eb6cdf7

    • SHA512

      ac546a5f2f125190d32484485d690658818a182e645f7cd2c8539f30f682964df122d4bdc085900e22ff83ab4f764dfe10a956c2682e043b2e05e0497aeaf4e8

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVA:vCA9OtEvwDpjy

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks