Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_38feee304798d094b47e73cc45556552_cryptolocker

  • Size

    63KB

  • Sample

    240315-dynz5ahc75

  • MD5

    38feee304798d094b47e73cc45556552

  • SHA1

    653b87fa1e1c8107c945a08fc82ff8d564da30ab

  • SHA256

    4093f57cd9214528dbc075247b6b6185af61a8090ea7f030d66a8612cc99dd48

  • SHA512

    a8bb3545f73acadd0c72355eeca903e07ce812c1b4fb9cb0e0b000ad6767be0e98c1665d58bb8244b92170aa2b1ae55614ab3963a1055612b2c04afcd7972358

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIRM:6j+1NMOtEvwDpjr8ox8UDEKKM

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_38feee304798d094b47e73cc45556552_cryptolocker

    • Size

      63KB

    • MD5

      38feee304798d094b47e73cc45556552

    • SHA1

      653b87fa1e1c8107c945a08fc82ff8d564da30ab

    • SHA256

      4093f57cd9214528dbc075247b6b6185af61a8090ea7f030d66a8612cc99dd48

    • SHA512

      a8bb3545f73acadd0c72355eeca903e07ce812c1b4fb9cb0e0b000ad6767be0e98c1665d58bb8244b92170aa2b1ae55614ab3963a1055612b2c04afcd7972358

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIRM:6j+1NMOtEvwDpjr8ox8UDEKKM

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks