Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-13...er.exe

windows7-x64

9

2024-03-13...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-13_6e5c0b753328783d84c0dae84a6073cd_cryptolocker

  • Size

    62KB

  • Sample

    240313-c15j8aae6s

  • MD5

    6e5c0b753328783d84c0dae84a6073cd

  • SHA1

    887d5df5797d869dfb7fed48a37b3896346dc11a

  • SHA256

    906e779c9bb34f2ef724aa8769a64f3fb4d8eaa6b0f56abb5f5022e249b4a277

  • SHA512

    f1982e6da28659bc293e68546239013839d74b3389a6d7355010c1f8fbfea48288d2dd2c01fa89b2e21f64e1e361b05d9dc992c753c93e926cef5ab72a666297

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtss:BbdDmjr+OtEvwDpjM8E

Score
10/10

Malware Config

Targets

    • Target

      2024-03-13_6e5c0b753328783d84c0dae84a6073cd_cryptolocker

    • Size

      62KB

    • MD5

      6e5c0b753328783d84c0dae84a6073cd

    • SHA1

      887d5df5797d869dfb7fed48a37b3896346dc11a

    • SHA256

      906e779c9bb34f2ef724aa8769a64f3fb4d8eaa6b0f56abb5f5022e249b4a277

    • SHA512

      f1982e6da28659bc293e68546239013839d74b3389a6d7355010c1f8fbfea48288d2dd2c01fa89b2e21f64e1e361b05d9dc992c753c93e926cef5ab72a666297

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtss:BbdDmjr+OtEvwDpjM8E

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks