Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_d97ac71c448ae1a3e74ea03516c9cdb8_cryptolocker

  • Size

    40KB

  • Sample

    240328-fkvxmaca99

  • MD5

    d97ac71c448ae1a3e74ea03516c9cdb8

  • SHA1

    bc0060ea9b1a32646896b4cffffbe0a52c04cb15

  • SHA256

    ef8abe2b5c566deeed78b250af7bb0e8df12db85efb4cd175b4e651a41b0c8d7

  • SHA512

    eea231afe40c9364ca91b3df56c81562f2f18581ea769fa8423be82babb867ad006c10bf2bfe75fdaa57cc9bcca844f9e878aeb8cdaa582be5cf6a2364b4293d

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9RzhwaO4t:i5nkFGMOtEvwDpjR+TD

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_d97ac71c448ae1a3e74ea03516c9cdb8_cryptolocker

    • Size

      40KB

    • MD5

      d97ac71c448ae1a3e74ea03516c9cdb8

    • SHA1

      bc0060ea9b1a32646896b4cffffbe0a52c04cb15

    • SHA256

      ef8abe2b5c566deeed78b250af7bb0e8df12db85efb4cd175b4e651a41b0c8d7

    • SHA512

      eea231afe40c9364ca91b3df56c81562f2f18581ea769fa8423be82babb867ad006c10bf2bfe75fdaa57cc9bcca844f9e878aeb8cdaa582be5cf6a2364b4293d

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9RzhwaO4t:i5nkFGMOtEvwDpjR+TD

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks