Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-27...er.exe

windows7-x64

9

2024-03-27...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker

  • Size

    63KB

  • Sample

    240327-gekedadh53

  • MD5

    b19ab53c9eae891c0cf528dae6b86b5e

  • SHA1

    5a513b2a84f4c19fd53d7089d3df67b03cc5132e

  • SHA256

    690dbb9adfe55efaaa843807d58b3067f2f8da1ec331de00e2138e5182e6e96b

  • SHA512

    8d308a9162d048f56788346bc7520cb14751c1778aac8204b0d8dc5e967095106c8a2e32cafd4f98aac2d6f4aaf647d113588554fc578d508bd372a9f9a8565e

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKI+:6j+1NMOtEvwDpjr8ox8UDEKF

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_b19ab53c9eae891c0cf528dae6b86b5e_cryptolocker

    • Size

      63KB

    • MD5

      b19ab53c9eae891c0cf528dae6b86b5e

    • SHA1

      5a513b2a84f4c19fd53d7089d3df67b03cc5132e

    • SHA256

      690dbb9adfe55efaaa843807d58b3067f2f8da1ec331de00e2138e5182e6e96b

    • SHA512

      8d308a9162d048f56788346bc7520cb14751c1778aac8204b0d8dc5e967095106c8a2e32cafd4f98aac2d6f4aaf647d113588554fc578d508bd372a9f9a8565e

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKI+:6j+1NMOtEvwDpjr8ox8UDEKF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks