Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_994fa312d3401e630bc0731c85176fab_cryptolocker

  • Size

    35KB

  • Sample

    240328-fevdxaed2t

  • MD5

    994fa312d3401e630bc0731c85176fab

  • SHA1

    6e5ebacfb5b9c97c28ce287d250330602d08d0d3

  • SHA256

    42056eb8c49d847f5940db553bb88a129d05ddc02ac2174b9d240180315c31fa

  • SHA512

    8a8aed1dfaf244012e7db719e1afae8f17ab89b26ea25052188dd83dda64e8ec3e0d7d3e528acc5767e41a1662c8dc46e820a35d474bbea1036180c95bc6e851

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4aKWUn:b7o/2n1TCraU6GD1a4Xt9bRU64hTn

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_994fa312d3401e630bc0731c85176fab_cryptolocker

    • Size

      35KB

    • MD5

      994fa312d3401e630bc0731c85176fab

    • SHA1

      6e5ebacfb5b9c97c28ce287d250330602d08d0d3

    • SHA256

      42056eb8c49d847f5940db553bb88a129d05ddc02ac2174b9d240180315c31fa

    • SHA512

      8a8aed1dfaf244012e7db719e1afae8f17ab89b26ea25052188dd83dda64e8ec3e0d7d3e528acc5767e41a1662c8dc46e820a35d474bbea1036180c95bc6e851

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3q4aKWUn:b7o/2n1TCraU6GD1a4Xt9bRU64hTn

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks