Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_23bfd1cf518cbb937de8f6fd3521a66a_cryptolocker

  • Size

    32KB

  • Sample

    240328-han3facd96

  • MD5

    23bfd1cf518cbb937de8f6fd3521a66a

  • SHA1

    f969f6aae4fb7bbf44961976aa675ec704e99331

  • SHA256

    50e15c31a69415d3723c60780e20608c4093a28bcb03e3f83649d7ea0e3b954c

  • SHA512

    0fa4b77df2189710260c02efff58dcaae3893e4df1d04f2cbd43f60dcdc6d9527098b2adbacac42f857e392b671d0d38dad57484d4fdd75a83207f5926c3ee44

  • SSDEEP

    768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHbjyz:q0zizzOSxMOtEvwDpj/arqc

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_23bfd1cf518cbb937de8f6fd3521a66a_cryptolocker

    • Size

      32KB

    • MD5

      23bfd1cf518cbb937de8f6fd3521a66a

    • SHA1

      f969f6aae4fb7bbf44961976aa675ec704e99331

    • SHA256

      50e15c31a69415d3723c60780e20608c4093a28bcb03e3f83649d7ea0e3b954c

    • SHA512

      0fa4b77df2189710260c02efff58dcaae3893e4df1d04f2cbd43f60dcdc6d9527098b2adbacac42f857e392b671d0d38dad57484d4fdd75a83207f5926c3ee44

    • SSDEEP

      768:q0ZziOWwULueOSdE8tOOtEvwDpjeWaJIOc+4tHbjyz:q0zizzOSxMOtEvwDpj/arqc

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks