Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-16_1fa23ca5f84800b38c5246fdeee77989_cryptolocker

  • Size

    47KB

  • Sample

    240316-eqhzksdd25

  • MD5

    1fa23ca5f84800b38c5246fdeee77989

  • SHA1

    aee1e65c05a1ba13b3fee24b49de425c4a93972d

  • SHA256

    e7b245c53a5fb2beeee73630ac4ba2fc8ebd960b486ccf698ffcf0d57633b476

  • SHA512

    5c4ca84350c3d6c40bb3c73ca03b30b45a8b35323e252141185f862d6ae351db39bb3b6b1e6bab3741044189b9da9b5760693a29fa0b9fe96180b4f46a115d10

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB+Y3:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6n

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_1fa23ca5f84800b38c5246fdeee77989_cryptolocker

    • Size

      47KB

    • MD5

      1fa23ca5f84800b38c5246fdeee77989

    • SHA1

      aee1e65c05a1ba13b3fee24b49de425c4a93972d

    • SHA256

      e7b245c53a5fb2beeee73630ac4ba2fc8ebd960b486ccf698ffcf0d57633b476

    • SHA512

      5c4ca84350c3d6c40bb3c73ca03b30b45a8b35323e252141185f862d6ae351db39bb3b6b1e6bab3741044189b9da9b5760693a29fa0b9fe96180b4f46a115d10

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WTB+Y3:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ6n

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks