Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-11...er.exe

windows7-x64

9

2024-03-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-11_353ee9e7b3e2202ccbdab8c736bf81d8_cryptolocker

  • Size

    49KB

  • Sample

    240311-v1mnhshc9z

  • MD5

    353ee9e7b3e2202ccbdab8c736bf81d8

  • SHA1

    78e25846df478c0de08d661a455e40a4e740d59f

  • SHA256

    21c4511bebd4fc2a23f970409f16c540c4ff7fd76152cd510691a9aa16610a00

  • SHA512

    4f448cc3f9218d916b59eadb4327df0aeaf7e988a8bee61aef894f67df9e8b2392d7ee6ee3c5f84e3984afad8dbda80096b91d6f0401d7a00b192ceb3385f06d

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaSvaB:xj+VGMOtEvwDpjy+TRB

Score
10/10

Malware Config

Targets

    • Target

      2024-03-11_353ee9e7b3e2202ccbdab8c736bf81d8_cryptolocker

    • Size

      49KB

    • MD5

      353ee9e7b3e2202ccbdab8c736bf81d8

    • SHA1

      78e25846df478c0de08d661a455e40a4e740d59f

    • SHA256

      21c4511bebd4fc2a23f970409f16c540c4ff7fd76152cd510691a9aa16610a00

    • SHA512

      4f448cc3f9218d916b59eadb4327df0aeaf7e988a8bee61aef894f67df9e8b2392d7ee6ee3c5f84e3984afad8dbda80096b91d6f0401d7a00b192ceb3385f06d

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaSvaB:xj+VGMOtEvwDpjy+TRB

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks