Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-15...er.exe

windows7-x64

9

2024-03-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-15_b770e8ad27d31f66406b50840bbb9c83_cryptolocker

  • Size

    65KB

  • Sample

    240315-razcvacd46

  • MD5

    b770e8ad27d31f66406b50840bbb9c83

  • SHA1

    98e07a7786ff65e1d9c558e6648c5f267a24ed1e

  • SHA256

    023a9fbd9a2e7d09093a3092719e3fb513ca5ac2dc26387527317c14a24b5d3a

  • SHA512

    e8f3757a408b2236d59ffb58c21d7ad4f5ac72181ccee6455213ef0ebc531601a9ce7c65f9c5294236ec55738f6d7353243864f23c02c2b6224742b5577f9258

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLh:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7A

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_b770e8ad27d31f66406b50840bbb9c83_cryptolocker

    • Size

      65KB

    • MD5

      b770e8ad27d31f66406b50840bbb9c83

    • SHA1

      98e07a7786ff65e1d9c558e6648c5f267a24ed1e

    • SHA256

      023a9fbd9a2e7d09093a3092719e3fb513ca5ac2dc26387527317c14a24b5d3a

    • SHA512

      e8f3757a408b2236d59ffb58c21d7ad4f5ac72181ccee6455213ef0ebc531601a9ce7c65f9c5294236ec55738f6d7353243864f23c02c2b6224742b5577f9258

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLh:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7A

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks