Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-20...er.exe

windows7-x64

9

2024-03-20...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker

  • Size

    41KB

  • Sample

    240320-dbq6zafb35

  • MD5

    6851b45daff176ba2850c18efee0eae9

  • SHA1

    9c1686518d32c3021fced769b8932f0bc1267527

  • SHA256

    754d556b2751ec2c96159ca3e52539a9b2a01af8cd2e9767ef8358b1f0d0ce19

  • SHA512

    580f050d14c4dbd050dff9031d188cddbfb010ac1b733425a40ff215eec03d0ac13bf9582ebdb5cac64c2f97890021bd32d7f2d84cf3285fa799516b7b2dc46a

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/BJp:6j+1NMOtEvwDpjrR5

Score
10/10

Malware Config

Targets

    • Target

      2024-03-20_6851b45daff176ba2850c18efee0eae9_cryptolocker

    • Size

      41KB

    • MD5

      6851b45daff176ba2850c18efee0eae9

    • SHA1

      9c1686518d32c3021fced769b8932f0bc1267527

    • SHA256

      754d556b2751ec2c96159ca3e52539a9b2a01af8cd2e9767ef8358b1f0d0ce19

    • SHA512

      580f050d14c4dbd050dff9031d188cddbfb010ac1b733425a40ff215eec03d0ac13bf9582ebdb5cac64c2f97890021bd32d7f2d84cf3285fa799516b7b2dc46a

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/BJp:6j+1NMOtEvwDpjrR5

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks