Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-18...er.exe

windows7-x64

9

2024-03-18...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-18_0861d64aebfd466278e5beacea816f85_cryptolocker

  • Size

    63KB

  • Sample

    240318-w15d1afa78

  • MD5

    0861d64aebfd466278e5beacea816f85

  • SHA1

    8bee82115d614aa7e3668e8c42d875522600912e

  • SHA256

    f5aca8d29823777be0033e54bfebcfbceac064c3cc64bb237ab04ec5fdfa769e

  • SHA512

    3d9082f478f888be1701e87561eb9f53244fe6024633b9e2e1bfc23e1296577dffc247de82b44864ca3de1f72eaf2455d0e2b8b8c04ae7a7b085df3614cb49d0

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvBk:TCjsIOtEvwDpj5HE/OUHnSMYR

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_0861d64aebfd466278e5beacea816f85_cryptolocker

    • Size

      63KB

    • MD5

      0861d64aebfd466278e5beacea816f85

    • SHA1

      8bee82115d614aa7e3668e8c42d875522600912e

    • SHA256

      f5aca8d29823777be0033e54bfebcfbceac064c3cc64bb237ab04ec5fdfa769e

    • SHA512

      3d9082f478f888be1701e87561eb9f53244fe6024633b9e2e1bfc23e1296577dffc247de82b44864ca3de1f72eaf2455d0e2b8b8c04ae7a7b085df3614cb49d0

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2l9tMPvBk:TCjsIOtEvwDpj5HE/OUHnSMYR

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks