Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-28...er.exe

windows7-x64

9

2024-03-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-28_95959b13a1354783ab9accb4235f14c7_cryptolocker

  • Size

    41KB

  • Sample

    240328-sx6k4sae98

  • MD5

    95959b13a1354783ab9accb4235f14c7

  • SHA1

    f858f0a8f161f6ff806d07d468995b7b30ff62ef

  • SHA256

    9b00d087a27c3ea6e047858aec3b6ad9cb2a580151a0921f3c06c7123c3ca9f1

  • SHA512

    79aa54c56341a6b637c38bfeaa347b05bd9867b2a0a941611139257e1a6d5b4b1f782e88ec62909ad2b979f4183497f5bd76cc0cfa5c98954fd45e63d9f8a3ec

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTyjL4P:ZzFbxmLPWQMOtEvwDpjLeU34Y

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_95959b13a1354783ab9accb4235f14c7_cryptolocker

    • Size

      41KB

    • MD5

      95959b13a1354783ab9accb4235f14c7

    • SHA1

      f858f0a8f161f6ff806d07d468995b7b30ff62ef

    • SHA256

      9b00d087a27c3ea6e047858aec3b6ad9cb2a580151a0921f3c06c7123c3ca9f1

    • SHA512

      79aa54c56341a6b637c38bfeaa347b05bd9867b2a0a941611139257e1a6d5b4b1f782e88ec62909ad2b979f4183497f5bd76cc0cfa5c98954fd45e63d9f8a3ec

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenQL3bTyjL4P:ZzFbxmLPWQMOtEvwDpjLeU34Y

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks