Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-16...er.exe

windows7-x64

9

2024-03-16...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-16_cfd53fb030e1cd621d2536b896623128_cryptolocker

  • Size

    84KB

  • Sample

    240316-hh2nhafh22

  • MD5

    cfd53fb030e1cd621d2536b896623128

  • SHA1

    5834421d63f4699ba807a708a25bffaedd10bc27

  • SHA256

    393b5f45419f795de89c44941234b26dd1db575169f17fd98961020d2e0f64b6

  • SHA512

    7b974cfbc0a331b575f8e06f99404166f3bfc83f85df4989ab6f913cce091089bd46fc0ae9bd6df90c8cb0c5f55b4516bff05e80bada64e8e7e906336a07a36d

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQsM:V6a+pOtEvwDpjvp1

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_cfd53fb030e1cd621d2536b896623128_cryptolocker

    • Size

      84KB

    • MD5

      cfd53fb030e1cd621d2536b896623128

    • SHA1

      5834421d63f4699ba807a708a25bffaedd10bc27

    • SHA256

      393b5f45419f795de89c44941234b26dd1db575169f17fd98961020d2e0f64b6

    • SHA512

      7b974cfbc0a331b575f8e06f99404166f3bfc83f85df4989ab6f913cce091089bd46fc0ae9bd6df90c8cb0c5f55b4516bff05e80bada64e8e7e906336a07a36d

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVNlVSLQsM:V6a+pOtEvwDpjvp1

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks