Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-25...er.exe

windows7-x64

9

2024-03-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-25_840b8290a1126f8f403e2fe1635f68c6_cryptolocker

  • Size

    62KB

  • Sample

    240325-p2jelaga77

  • MD5

    840b8290a1126f8f403e2fe1635f68c6

  • SHA1

    94fa1b1cafc4ddbaaf0b96c73ae04490c3c00b5b

  • SHA256

    24806c1ad3189991a6db800d65aed0c122a1454eba41b9ecc17164e169cf9af0

  • SHA512

    127f7000e4741f5c451a908b92ecd0c6f5347e1fae581ae80e58aeeae07a477981800691f5d73ac9623c019e5c55688d506c6109fd7d3892dfe92a059023bdb5

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29329:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_840b8290a1126f8f403e2fe1635f68c6_cryptolocker

    • Size

      62KB

    • MD5

      840b8290a1126f8f403e2fe1635f68c6

    • SHA1

      94fa1b1cafc4ddbaaf0b96c73ae04490c3c00b5b

    • SHA256

      24806c1ad3189991a6db800d65aed0c122a1454eba41b9ecc17164e169cf9af0

    • SHA512

      127f7000e4741f5c451a908b92ecd0c6f5347e1fae581ae80e58aeeae07a477981800691f5d73ac9623c019e5c55688d506c6109fd7d3892dfe92a059023bdb5

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF29329:aq7tdgI2MyzNORQtOflIwoHNV2XBFV70

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks