Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker

  • Size

    55KB

  • Sample

    240328-lvzlfshh2v

  • MD5

    a57b4335531fb7e975e74a9aac3b01b7

  • SHA1

    8b8ddf0a8c24715a497fd5281fe5adac29fb77e1

  • SHA256

    f513b3c0534e13857172298aa946b4d4c702a6687ae136123949aa7b5be3c3bd

  • SHA512

    e306a4bebe8f09c2c2f707a577f0e8eb412b55625587fc0fb903392e5379d17261b02ec9c48631b8a6137a1c38b1ec0900dd8a4a8e051b97099833f89bbf3e8f

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CdMduYJ:79mqyNhQMOtEvwDpjBPY7xv3g8ZdtJ

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_a57b4335531fb7e975e74a9aac3b01b7_cryptolocker

    • Size

      55KB

    • MD5

      a57b4335531fb7e975e74a9aac3b01b7

    • SHA1

      8b8ddf0a8c24715a497fd5281fe5adac29fb77e1

    • SHA256

      f513b3c0534e13857172298aa946b4d4c702a6687ae136123949aa7b5be3c3bd

    • SHA512

      e306a4bebe8f09c2c2f707a577f0e8eb412b55625587fc0fb903392e5379d17261b02ec9c48631b8a6137a1c38b1ec0900dd8a4a8e051b97099833f89bbf3e8f

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/iVTab3GRuv3VylSV/CdMduYJ:79mqyNhQMOtEvwDpjBPY7xv3g8ZdtJ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks